We didn’t want to issue SSL/TLS certs anyway, eMudhra suggests after one private key turns out to be the number 4
Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from…
php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619
CVE-2026-109618 and CVE-2026-109619 are critical PHP core RCE flaws that leaked ahead of disclosure. We cover what is verified, why exploitation converges…
Google Gemini AI gains personal intelligence in Android Auto
Google has expanded Gemini AI capabilities in Android Auto and vehicles with Google built-in by integrating Personal Intelligence features that access…
eMudhra kills its certificate business after researchers cracked its private keys in under a second
The private keys were so weak they could be guessed in under a second — and one of them was just the number 4.
PSA: PHP Security Updates Available for Two Critical Vulnerabilities, Update Now
The PHP project has released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that can…
Abandoned Popcorn Time app exposed millions of device to RCE attacks
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security…
Using model routing to lower inference costs
Running frontier models for coding and other purposes can be very expensive, but also, sometimes, very effective. It’s tempting to use smaller or older…
SBI Probes Suspected Exposure of 3,897 Customer Records
State Bank of India (SBI) is investigating a suspected data exposure after identifying personal information in 3,897 customer records reportedly found on…
The Current Landscape of OAuth Attacks
Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments.
Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections
New York, NY, USA, 21st October 2026, CyberNewswire
There’s a third PHP2Shell bug, but it won’t get an emergency fix
Bad things (and software bugs?) come in threes
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. […]
Nigerian Hacker Sentenced To Eight Years For Fraud And Identity Theft
A Nigerian man has been sentenced to eight years in a U.S. prison for his role in wide-ranging hacking, tax fraud, identity theft, and investment fraud…
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 23)
CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.
Signal bug could keep your mic – and camera – on after hangup
Careful what you say after goodbye, or better yet, update your messaging app
Second Zeabur Breach Exposes Cloud Infrastructure Weaknesses
Zeabur, a cloud development platform, has announced plans to shut down their services following a second major security breach in less than two months. A…
(Reliable)? php2shell exploitability, (Fri, Oct 23rd)
Yesterday everyone was running around like crazy (me included 🙂 because of the php2shell vulnerability.
Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
We discuss the incident involving the leak of information about vulnerabilities CVE-2026-109618 and CVE-2026-109619. Kaspersky solutions detect the…
Critical PHP Vulnerabilities Spark Global Security Alert: Industry Experts React
Two critical PHP vulnerabilities, the widely used programming language underpinning millions of websites and web applications, have prompted urgent…
Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
Coordinated by the European Commission in cooperation with Europol, the analysis draws on stakeholder consultations, dedicated meetings, surveys and…
Fake Amazon Music x YouTube deal lures creators into a Google login trap
A convincing “creator portal” uses your own YouTube videos and viewing figures to steal your Google login.
Fortinet Recognized by Crime Stoppers International for Cybersecurity Leadership
At the recent Crime Stoppers International (CSI) Global Summit, Fortinet received CSI’s 2026 Global Annual Cybersecurity Leadership Award.
Capcom Data Breach Exposes 11.7 Million Records: What Gamers Need to Know
Capcom confirms 11.7 million records exposed in a CAPCOM ID data breach. Learn what information was compromised and how gamers can protect their accounts.