The Hacker News (3 hours ago)
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application.
Read the full story on The Hacker News.
Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.
The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019.
Following patches for critical PHP remote code execution vulnerabilities, Cloudflare recorded millions of exploit attempts within hours. Update immediately or take affected sites offline.
Governments and companies are scrambling to protect their websites, as Amazon says it experienced attacks before the warning was made public.
AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the internet.
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014.
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks.
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server.
72 active sources
27 Turkish · 45 English
All sources
