The Hacker News (1 hour ago)
Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found. Exit relays are the last hop in a Tor circuit, where traffic leaves the network for its destination.
Read the full story on The Hacker News.
Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.
The attackers obtained the session data from the memory of a support application the retailer believed could only be reached from its own computers. The breach gave a Chinese organized crime group a way to generate gift cards for retailers including Target and Sephora.
The European Commission has opened an investigation into Booking.com over concerns that the platform is not doing enough to protect users from fake listings and phishing scams.
Website owners are bracing for an urgent security update after a serious warning, with the PHP team preparing an emergency response, as the vulnerabilities impact around 70% of the web.
Security patches for the PHP programming language, widely used to build websites and web apps, are expected to roll out today, with the goal of fixing two critical vulnerabilities that could wreak havoc on the internet if left unchecked.
The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them.
You cannot fully block the two critical PHP flaws called PHP2Shell before today’s fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that suggested it now says.
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run against production and worth acting on afterward lives in the harness around the model.
Unknown threat actors breached TeamUpdraft’s website and potentially gained unauthorized access to customers’ connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites.
U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services “developed using DeepSeek implementations,” under a Department of Homeland Security order.
72 active sources
27 Turkish · 45 English
All sources
