Web App Owners – You’re on Notice. Your Low-Hanging Fruit Just Got Lower
This article is part of an ongoing series from Sophos frontline security operations specialists, sharing the expertise they use to...
Blog
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to...
AI Guardrails Aren’t Stopping Criminal Hackers
Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help...
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with...
Want a higher paying tech job? Employers seek AI fluency
if ( !emtpy($headline_subheadline ) ) : ?> Specialized AI skills will get you a higher salary in a cautious IT...
She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family
To escape the chaos of her Russian childhood, Lili Infante became an American law enforcement prodigy. She pioneered the DEA’s...
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws Pierluigi Paganini October 21, 2026 PHP will release emergency...
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections Pierluigi Paganini October 21, 2026 Citizen Lab...
Workshop on Economics and Information Security (WEIS) Archive
Workshop on Economics and Information Security (WEIS) Archive There’s a new archive of all the papers from twenty-five years of...
Microsoft expands sovereign cloud offerings as data control concerns grow
if ( !emtpy($headline_subheadline ) ) : ?> New tools give customers more control over encryption keys, cloud operations and AI...
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t
You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed...
The Harness Is the Hard Part of Agentic Pentesting
The Hacker NewsOct 21, 2026AI Penetration Testing / Web Security An AppSec team can point an AI agent running on...
Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections...
Amazon Bee Frontier and Bee Eclipse Raise Workplace Consent Concerns
Amazon’s new Bee Frontier and Bee Eclipse AI devices can turn conversations into transcripts, summaries, and to-do lists. But their...
ChatGPT Can Now Do More in Chrome, but There’s a Security Trade-Off
ChatGPT can now do more than tell you what to do online; it can take over parts of the work...