The Hacker News (1 hour ago)
Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls.
Read the full story on The Hacker News.
Amazon’s budget home surveillance company now offers “its sharpest video yet.”
Quest is the latest in a series of healthcare technology companies that have been hacked in recent months.
There’s cybersecurity testing, and then there’s just plain cruelty.
Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe.
Compatibility isn’t as simple as it appears.
There have been millions of attempts to target PHP flaws following disclosure of major vulnerabilities.
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk.
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year.
Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open.
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs’ default client, which set no spending limit until releases on August 18 added one.
72 active sources
27 Turkish · 45 English
All sources
