SecurityWeek (1 hour ago)
The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches.
Read the full story on SecurityWeek.
The US Cybersecurity and Infrastructure Security Agency (CISA) has put both PHP2Shell flaws in its Known Exploited Vulnerabilities catalogue. It made the change on Monday, according to its alert. Federal civilian agencies have until Thursday, 29 October, to fix CVE-2026-109618 and CVE-2026-109619.
That’s just $2.99 a month for Proton VPN.
Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as “PHP2Shell” put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at risk.
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach.
CrowdStrike calls CHATTY SPIDER the dominant threat to US law firms. The cybercrime group grew its activity 129% in the first eight months of 2026, compared with all of 2024.
FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers.
The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog
The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
The Guardian Technology
71 active sources
26 Turkish · 45 English
All sources
