The Next Web (1 hour ago)
Organisations that cannot quickly patch two critical flaws in PHP should consider taking their websites offline, the EU’s cybersecurity response team has warned. PHP powers a large share of the web. The PHP project will release fixes at 14:00 UTC on Wednesday, October 21.
Read the full story on The Next Web.
Unknown threat actors breached TeamUpdraft’s website and potentially gained unauthorized access to customers’ connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites.
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024.
U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services “developed using DeepSeek implementations,” under a Department of Homeland Security order.
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that’s collectively called Plex2Shell.
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
SpaceX made more money from artificial intelligence than from Starlink in the third quarter, as total revenue rose 161% to $14.6bn. The company also swung to a net profit of $4.4bn, from a $1.1bn loss a year earlier, according to its quarterly results, the second it has published since its listing.
Anyone could calculate the private keys of eight eMudhra intermediate certificates from the certificates themselves. eMudhra is a certificate authority based in India. Anyone holding the keys could issue a certificate for any website that browsers and apps would accept.
Visa, BILL and Billtrust have started a live pilot in which AI agents pay approved supplier invoices from start to finish. The agents pay through suppliers’ own payment portals. The three companies call it the first live pilot of its kind.
More than 10 million developers are now building on Cloudflare, the company said on Tuesday. That is up from 7.4 million a quarter earlier, a rise of about 35% in three months. Cloudflare announced the figure in a press release and tied the growth to AI agents.
72 active sources
27 Turkish · 45 English
All sources
