Hackers are now using public exploit code to break into websites that run PHP, and universities and business sites are among the main targets. The bugs…
Category: Cyber Security News
PHP Releases New Windows Build Security Updates to Fix Critical HTTP2Shell Vulnerability
The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1, 8.4.27-1, 8.3.36-1, and…
Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files in Downloads Folder
A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens.…
OpenBSD 8.0 Released With Major Security Hardening and Post-Quantum SSH Support
OpenBSD 8.0 has been released with security fixes across its kernel, network services, firewall, and update tools, alongside experimental post-quantum SSH…
Microsoft Investigation Teams Issue Affecting Users in the United States
Microsoft has restored Microsoft Teams service after investigating an issue affecting some users in the United States on October 26, 2026. The company…
Emperador Ransomware Group Claims to Have Stolen 3.9GB of Data from the Maker of Budweiser and Corona
The Emperador ransomware group claims to have stolen 3.9GB of data from AB InBev and demands $1 million in Bitcoin, but the alleged breach remains…
Anthropic’s Claude AI Model Accessed US State Voter Data Behind a Paywall
Anthropic’s Claude AI model accessed aggregate vote counts from Georgia without human approval after bypassing a paywall during an internal statistics…
Researchers Use AI Agents to Breach Anthropic’s Internal Systems in Just 12 Hours
Cybersecurity startup Cathedral says its AI agents found routes into Anthropic’s internal business systems in less than 12 hours, exposing how fast…
Microsoft Releases Out-of-Band Security Updates for Brotli and .NET tarballs Vulnerability
Microsoft has released out-of-band security updates for .NET to fix a Brotli buffer overflow and unsafe ownership settings in Linux distribution archives.…
Cloudflare Release Emergency WAF Ruleset Update Following Brotli Vulnerability
Cloudflare has announced an emergency Web Application Firewall (WAF) ruleset update linked to CVE-2026-111497, a Brotli vulnerability. The October 25,…
Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Linux Kernel 7.1
Kali Linux 2026.3 has been released as the third Kali update of 2026, bringing six new penetration testing tools, Linux kernel 7.1.5, KDE Plasma 6.7,…
Top 10 Best Data Access Governance Tools in 2026 [Ranked & Scored]
Ask any enterprise “who can read the M&A folder?” and watch the room go quiet effective access is buried under nested groups, inherited shares,…
HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow
The HTTP2Shell vulnerability reaches beyond web traffic, with new research showing how the same Brotli decoder flaw (CVE-2026-111497) can disrupt .NET…
Top 10 Best Hardware Security Modules (HSM) in 2026 [Ranked & Scored]
Every root of trust ends in an HSM the tamper-resistant hardware where CA keys, payment keys, and code-signing keys live beyond software’s reach. Two…
Top 10 Best Sensitive Data Discovery Tools in 2026 [Ranked & Scored]
Every data-security control inherits the same dependency: an inventory someone actually believes. Discovery is where that inventory comes from and in 2026…
OpenSSL 4.1.0 Released With DTLS 1.3 and Post-Quantum Security Improvements
OpenSSL has released version 4.1.0, bringing DTLS 1.3 support, faster cryptographic operations, and new tools for developers building secure network…
Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions
Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared permissions to steal…
India’s Film Sensor Board Data Breach – Unreleased Scripts, 500+ Film Titles Exposed
India’s Central Board of Film Certification (CBFC) is investigating a reported data breach involving confidential documents linked to more than 500 film…
Hacker Exploits Critical PHP2Shell Flaws to Win $2,000 Bitcoin Challenge, Releases PoC
A security researcher known online as killa has won a public Bitcoin challenge by using two critical PHP flaws to reach a test server. The winning run…
Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers From One Compromised Device
A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers.…