SecurityWeek (1 hour ago)
Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.
Read the full story on SecurityWeek.
Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger. By some accounts, up to 70 percent of websites use PHP in some capacity.
The vibe-coding platform said all of its customers should revoke and rotate their private keys, after hackers were able to decrypt some customer secrets.
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining why faster detection and automated containment are critical.
Shady VPNs are giving people a ‘false sense of security.’ But why are Russians being targeted?
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 suspects.
The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.
Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.
Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.
Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.
72 active sources
27 Turkish · 45 English
All sources
