WHATS PHP warns admins of two critical flaws, emergency patches coming tomorrow
BleepingComputer ·
WHATS
THE HAX?
Top story
Also in coverage
FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024
The Record from Recorded Future News ·
The Internet goes on high alert after discovery of 8 compromised TLS certs
Security - Ars Technica ·
Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme
CyberScoop ·
Article feed
60 sources ↓France had more Internet-exposed Danfoss refrigeration dashboards than the rest of the world combined before the supermarket attacks (weekly IPv4 scan data)
CVE-2026-46633: Proving exploitability of Twig sandbox bypass
The OffiDocs Browser Extension Campaign
All vulnerabilities are now race conditions
PHP warns admins of two critical flaws, emergency patches coming tomorrow
Zeabur shutting down after second security breach in two months
OpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code
DHS bans DeepSeek products across US federal civilian agencies
FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024
California warns all public school students of data stolen in contractor breach
23andMe successor settles with California for $6 million over cybersecurity failings
Nigerian national given 8-year sentence for tax business hacks
CVE-2026-46633: Proving exploitability of Twig sandbox bypass
Researchers Warn of Two Upcoming Critical PHP Flaws
Open feed of emerging 0-days with public timestamps from first signal to CVE and KEV listing (API and MCP, no auth)
EMudhra Intermediate CA Compromise
LOLCHAIN: Blockchain abuse research and evidence for malware analysts
The OffiDocs Browser Extension Campaign
Offensive toolkit (payload builder, serialized gadgets, stager) pulled from an open directory
RenPy based windows infostealer Malware - Flooding almost everywhere and causing financial losses
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
OpenAI models hacked a crypto wallet and breached more websites
Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign
ConnectWise customers hit by supply-chain attack linked to compromised API secret
Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQ
Close Identity Gaps in Software Development Before Unleashing AI
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
Detecting model tampering without signatures, processes, files or network calls. (Hunting ROME attacks)
Violations de données applicatives - Retour d’expérience du CERT-FR - Application Data Breaches - Lessons Learned from CERT-FR
BRONZE SANDCASTLE deploys modified Meterpreter shells
Black Hat Europe 2026 | Hear From Our Sponsors
Black Hat Stories | First Time Exhibitor
Black Hat Europe 2026 | Shaping the Future of AI and Cybersecurity
MG8 2026 Developer mode password
Reverse Engineering Pokémon Sprites (LGPE)
Reverse Engineer CAPTCHA-bypass (YouTube)
Nikkei data breach affected over 1.8 million records
Google Cloud Outage in London Disrupts Revolut Banking Services
AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Chrome flags malicious commands that scammers pass off as fixes
AOMEI Backupper servers hijacked for minutes at a time to push backdoor
Incomplete security patches show hackers where to look next
🍍📟 "App Store" Anyone?: Pager Portal - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
Hackers Turned GitHub Against Its Own Users | Threat Wire
🍍📟 New Deauth Attack for WPA3 - WiFi Pineapple Pager #pentesting #cybersecurity Aircrack-NG PR 2724
What Does a GRC Cybersecurity Professional Do?
CTF Walkthrough: The Cuckoo's Log
Purple Team Incident Adventure | TCM Community Live | Cybersecurity
Only 7% of CISOs at Large Companies Own AI Governance
Security Leaders Share Concerns About California Student Data Breach
Over Half of Financial Service Leaders Miss Spoofed AI Traffic
US Agencies Detail Incident Response Practices for Rogue AI Agents
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
The Key to AI Software Security Isn’t Speed, It’s Maturity
How Expert Hacker finds predators (Ryan Montgomery)
Flushing the toilet kills our network!
You can monitor EVERYTHING in your homelab with this
Google Mandates Further Verification for US and Canada Financial Ads
Scams Capture 22.4% of Fraud Dollars as Banks Adjust Defenses
Nearly 9 in 10 Card Issuers Turn to AI to Stop Fraud Without Blocking Sales
Head of AI Security Roles Surge in Large Organizations
Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds
CVE-2026-102204 Windows Subsystem for Linux Elevation of Privilege Vulnerability
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2026-70074 Windows DNS Information Disclosure Vulnerability
All vulnerabilities are now race conditions
v0.4.0-alpha is out!
PICS: Toilet Tube Tap found in OpenAI exec conference room in SF
Cisco Unified Intelligence Center SQL Injection Vulnerability
Cisco Meraki Security Hardening Release: October 2026
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
US Shoppers Are Ready to Give AI More of Their Holiday To-Do List
The Agentic Commerce Conversations Merchants Are Having Now
Are You Ready for AI Shopping Agents This Holiday Season?
Google may add your number to all your accounts: How to stop it
Meta glasses caught recording conversations without wake phrase
Man seeking love travels 2,000 km to meet an AI-generated woman
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
#StopRansomware: SafePay Ransomware
HMS Networks PEAK-System PCAN Windows drivers
Learn More About AI With Me at GTC
What Is Machine Data?
2 Hacking Tools You Need to See
Possible new Cellebrite iPhone Radio Zero-Day
Training AIs to Solve CAPTCHAs
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
Irish police force has its Twitter hacked in cryptocurrency scam
Krybit ransomware: what you need to know
When defrost becomes sabotage: 3 OT lessons from France’s supermarket attack
OT systems complicate quantum-resistant data protection
F5 rushes out emergency NGINX patches for three critical flaws
The journey of a paper unicorn: adventures inside a modern warehouse
MacSync under the microscope: new delivery methods and a new payload
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)
Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)
ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot
Encryption Is Getting Squeezed From All Sides
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
AI Changes Security Research
AI Security Engineering with Ashish Rajan!
Browser Cache Payloads
Self-efficacy in the age of AI
Team Introduction Videos for the European Cyber Security Challenge
Security Through Complexity #shorts
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.K. Sanctions Cryptomus for RU Money Laundering
Microsoft Patches More Than 1,400 Security Flaws
Agents are your newest insiders. Security must move at their speed.
Managing open-weight model risk in enterprise deployments
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
HackerOne Limited Me to 3 Reports After 12 Years
Google just paid a $90,000 bounty for this vulnerability
I Built a Hackbot for Less Than $250
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
HackTheBox - Eloquia
HackTheBox - DevHub
HackTheBox - Reactor
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’
Thoma Bravo's Proofpoint to buy Varonis Systems in $6.3 billion all-cash deal
Inbox flooded with sign-up messages? Email bombing explained
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
TAG-217 Targets South Korean Financial Services with ARTEX
Working in Boston at the World’s Largest Intelligence Company
Russia Is Tightening Internet Controls, Leading to Operational Risks
NEWS ALERT: G2A reports 35% jump in security software orders as consumers broaden protection
FIRESIDE CHAT: Firms once wanted AI callers stopped – now they want to sort good from bad
NEWS ALERT: Insignary launches Clarity AIR to expose hidden open-source and AI-generated code
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
wood will keep you warm, once when chop, carry, staple and sort it, and once when you burn it.
I tend to sauna 2-3 days a week, it have made wonders for my recovery. #sauna #mobilesauna #vlog
6 alternatives to Blackpoint for your shortlist
Cybercrime Detective Explains Cybersecurity Jargon in 60-Second Videos for Cybersecurity Awareness Month
Innovation wins. Why smaller beats bigger
ZDI-CAN-34762: Netgate
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
Introducing the new Copilot with Home, Code and Autopilot
Building the system for AI at work
Introducing Microsoft 365 G7: Intelligence + Trust for the mission ahead
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Fraud Risk Assessment; A New Model and New Approach
Ransomware: A Continuing Threat for Small Businesses
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 975 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.