An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.
Artificial Intimacy: Love and lies in the age of AI
Our latest report reveals how AI is reshaping our relationships, blurring what feels authentic, and creating new ways for intimacy to be exploited.
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.
Insurance industry fears potential impacts from PHP2Shell
A systemic cyber event could lead to billions of dollars in claims that exceed current risk models.
Process trees in Livehunt: YARA rules that know who launched what
Note: YARA-X v1.21.0 adds a parent_name field to the items in vt.behaviour.processes_list, and v1.22.0 adds ancestor_names. VirusTotal now fills that list…
UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
Jess Asato’s public campaigning for victims of online abuse put her in the crosshairs of Grok’s deepfake scandal. Then the UK member of parliament became…
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration…
OpenAI bets on AI economics with lower-cost GPT-6.1 Terra
OpenAI has launched GPT-6.1 Terra, a new reasoning model that it says delivers near-frontier performance on visual reasoning, professional task execution,…
Zoom Launches AI Guardrails for Enterprise Security
Zoom has announced new enterprise security features designed to give administrators greater control over AI agents operating within their collaboration…
Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
We are pleased to share that we have been named winner of Advanced Persistent Threat (APT) Solution of the Year at the Computing Security Awards for ESEC…
ThreatAware Launches Dimension Governed Workspace
ThreatAware has introduced Dimension, a new governed workspace platform designed to help organizations build, deploy, and manage custom security…
When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: When APIs Meet Machine-Speed Attacks: Lessons from CERT-In
Apple patches 286 bugs in iOS, macOS 27.2
Apple has released major security updates for iOS and macOS version 27.2, patching a total of 286 vulnerabilities across both platforms.
When AI Guardrails Expose Vulnerabilities
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: When AI Guardrails Expose Vulnerabilities
CISA 2030 Strategy Released
The Cybersecurity and Infrastructure Security Agency has released a comprehensive strategic plan called CISA 2030: Defend, Harden, Prevail, setting the…
Yet Another ClickFix Campaign, (Wed, Oct 28th)
Introduction
CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE
IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by…
Sony’s So-net Breach Exposes 2.59 Million Customer Records
Sony’s So-net breach exposed 2.59 million customer records and 54,401 email passwords. Learn what was leaked and how to protect accounts from follow-on…
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
A Ukrainian man who carried out ransomware attacks for both the Nefilim and Hive gangs, including attacks on law firms and a healthcare provider during…
ISC2 Launches New AI Security Certification as Cyber Skills Demands Grow
As artificial intelligence becomes more widely adopted, cybersecurity professionals are facing growing pressure to develop new skills, understand emerging…
The web’s having a rough week. Here’s how to browse safely
PHP and Node.js flaws, hacked sites, fake updates, and rogue certificates can put you at risk even on trusted websites. Here’s how to stay safe.
Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of…