PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports
PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports Pierluigi Paganini October 22, 2026 AWS detected PHP2Shell exploit attempts...
Blog
New Serious PHP Vulnerabilities Released and Patched
New Serious PHP Vulnerabilities Released and Patched PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36...
Apple, please give family IT admins a pester button
if ( !emtpy($headline_subheadline ) ) : ?> Why is it harder to be a family admin than to manage a...
Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
Ravie LakshmananOct 22, 2026Data Privacy / Regulatory Social media giant Meta was ordered to pay 25 billion in penalties by...
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
Ravie LakshmananOct 22, 2026Cybercrime / Law Enforcement INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909...
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
The Hacker NewsOct 22, 2026Enterprise Security / Artificial Intelligence Right now, there is probably an AI agent running on a...
ChatGPT Locked Chats Explained: How to Use It and What to Know
ChatGPT users can now put sensitive conversations behind an extra lock without deleting them from their accounts. OpenAI has introduced...
How to choose the right CTI tools for your business
Cyber threat intelligence (CTI) is a concept that is crucial to the security of corporate networks, yet it can be...
The Pentagon Lost 3 Million Records in Nine Months of Silence
Published: 22 October 2026 The Pentagon just confirmed what every CISO quietly fears. Hackers had access to the Defense Manpower...
FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations
FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations Pierluigi Paganini October 22, 2026 SafePay ransomware has hit...
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation,...
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
Swati KhandelwalOct 22, 2026Vulnerability / Artificial Intelligence A flaw in the OpenCode AI coding agent allowed a malicious or hijacked...
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python...
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Swati KhandelwalOct 22, 2026Vulnerability / Web Security Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x...
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
Swati KhandelwalOct 22, 2026Vulnerability / Web Security A remote attacker who has not logged in can crash many HTTP/3 web...