Cybersecurity

Hackers got a four-day head start on epic PHP2Shell vulnerability

Ars Technica Oct 22, 2026, 6:25 PM (3 hours ago)

Hackers were already probing the bug before defenders were told it existed.

Read the full story on Ars Technica.

Read at source

Cybersecurity

Mass Effect 5 trailer leaks following BioWare shutdown

Yesterday, EA shut down BioWare and canceled the studio’s new Mass Effect game in development, but a trailer apparently representing the game was published on Reddit today.

The Verge 11 minutes ago

Cybersecurity

How bug bounty sharpens one researcher’s security skills

As Cybersecurity Awareness Month continues, the GitHub Bug Bounty team spotlights @r31n, diving into their research approach, favorite bug classes, and advice for aspiring hackers.

GitHub Blog 1 hour ago

Cybersecurity

Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.

BleepingComputer 1 hour ago

Cybersecurity

Race to update services’ computer systems after cyber-security flaw found

Websites were taken offline after the developers of programming language PHP said “critical vulnerabilities” had been discovered.

BBC Technology 1 hour ago

Cybersecurity

Quest Diagnostics Reports Unauthorized Access of Patient Records

It’s unclear if this is related to the “Black October” PHP vulnerabilities currently roiling the internet.

Gizmodo 1 hour ago

Cybersecurity

The disastrous PHP vulnerabilities were exploited days before the patch

Hackers attempted to exploit the PHP flaws impacting sites across the web days before they were patched, according to a report from Amazon Threat Intelligence.

The Verge 1 hour ago