From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.
Tag: EN
PHP releases emergency fixes for 2 critical vulnerabilities
The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw.
Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw
Siemens identified the activity to be from the Romulus multi-platform ClickFix campaign, with Siemens Software Center users urged to apply an update
WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators
Hidden instructions told WhatsApp’s chatbot not to suggest privacy regulators to users struggling to delete their accounts.
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang. Detectives have linked the man…
Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique
Stop PHP2Shell with SentinelOne. Learn how Singularity Agent stops web worker post-exploitation, kills process trees, and hunts threats.
A patch only reduces risk when it runs in production
The patch was ready in days. It took months to ship. Why?I hear that question in nearly every customer conversation about vulnerability management. The…
Weak encryption certificates could have let hackers easily spoof websites
Major web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized.
Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
Cannabis smuggling from North America and Thailand in Europe has seen a sharp rise, driven by oversupply in legal markets and the adaptability of…
FBI Warns SafePay Ransomware Has Hit 600+ Organizations: Here’s What We Know
FBI and CISA warn SafePay ransomware has hit at least 600 organizations. Learn how the group attacks networks and what security teams can do to prevent…
Halfway is No Way: Why DSPM Fails if it Can Remediate, But Not Detect or Prioritize
Halfway is No Way: Why DSPM Fails if it Can Remediate, But Not Detect or Prioritize lee.potok@thal… Tue, 10/20/2026 – 08:17 A DSPM program must detect…
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media…
Man seeking love travels 2,000 km to meet an AI-generated woman
An influencer’s invitation to join her on a farm shows how public videos can feel dangerously personal.
UK finance watchdog wants firms to report AI failures and close calls
FCA seeks clear accountability as financial services embrace increasingly autonomous agents
OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks
OffSec’s new framework hub shows security leaders what their teams can do and how to prove it.
The local computing rebellion
Take a close look at your monthly software bills. The charges that once seemed small and separate can add up to a new kind of dependency: subscriptions…
PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers
PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run code on vulnerable web servers.…
Citizen Lab Director Slams Trump Administration, ‘Techno-Fascist’ Executives
Director Ron Deibert spoke to a crowd at SecTor 2026, warning that threats that the Citizen Lab investigates are being “super-charged” thanks to AI.
Protecting citizens, preserving rights
How can law enforcement make effective use of data and technology while ensuring that fundamental rights and the rule of law remain protected? This…
Microsoft Treats AI Agents as Insider Threats in New Security Framework
Microsoft urges organizations to secure AI Agents as insider threats, using dynamic permissions, continuous risk monitoring and automated containment.…