GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.
CVE-2026-87911
Read this article
PHP2Shell: What the Vulnerability Means and Why Patching Is Urgent
Two critical security vulnerabilities in the core of PHP affect a large proportion of websites – from personal WordPress blogs and online stores to…
When the attacker becomes the user: Rethinking account takeover
SPONSORED FEATURE: AI makes phishing easier than ever
CYBER BRIEFING | October 22, 2026
PHP RCE pair hits 9.2: patch now or pull sites offline
Quest Diagnostics Breach: What Patients Should Know
Quest Diagnostics is investigating a breach of its Quanum lab portal. Learn what is known about patient data exposure and what patients should do next.
Critical Node.js Brotli Decoder Bug (CVE-2026-111497) Allow RCE
HOC Shorts | Node.js released security updates across all supported active release lines (22.x, 24.x, and 26.x) addressing…
Salt Security wins three InfoSec Innovator awards
Salt Security has won three categories at Cyber Defense Magazine’s 2026 Top InfoSec Innovators awards, recognising its work in agentic AI and API…
When It Makes Sense to Replace a Legacy Virtualization Stack
Virtualization platforms often remain in place long after their original purpose because migration carries operational risk. Yet aging…
1Password Lets AI Agents Log In Without Seeing Your Passwords
1Password aims to let AI agents log in without exposing passwords. Here’s how the approach works and what privacy and access risks remain for users.
PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities
PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers…
Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France
Five suspects linked to the organisation and recruitment of serious violence have been arrested in Spain, Morocco, and France, in the latest results of…
The Good, the Bad and the Ugly in Cybersecurity – Week 43 (2026)
U.S. courts sentence tax fraudster, Chinese-linked actors use agentic AI in cloud supply chain attack, and PHP issues warning of two critical-level RCE…
Someone Will Click. Is Your Security Team Ready?
For Cybersecurity Awareness Month, we spoke with 3 members of OffSec’s IT and security teams about what effective security awareness looks like.
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
Microsoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote code loading, detections,…
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assistant.
CrowdStrike Uncovers New Agentic AI Campaigns
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Uncovers New Agentic AI Campaigns
CVE-2026-84942 – Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
Read this article
How Fraudulent Airline Support Numbers Exploit Search Results and AI-Generated Answers
A canceled flight. A missed connection. A refund that has yet to arrive. When travelers need urgent help, they often turn to search engines, social media,…
Amazon says PHP2Shell exploitation began 4 days before patches
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on…
Millions of PHP Instances Exposed – What Organizations Need To Do Right Now
Two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) have been published. Both vulnerabilities carry a severe CVSS score of 9.2 (more…
Exposed Refrigeration Systems Raise Global Cybersecurity Concerns
Cybersecurity researchers at Forescout are drawing attention to the risks posed by exposed refrigeration control systems, warning that weaknesses in…
Iranian Hacking Group Found Hosting C2 Infrastructure in the US
Stealthy malware campaign by ‘Prince of Persia’ threat group targeting organisations worldwide discovered operating on American soil
GitLab Max Severity Code Execution Flaw
GitLab has issued emergency security patches addressing a maximum-severity vulnerability in its Regular Expression Compiler component that enables remote…