The Hacker News (2 hours ago)
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025.
Read the full story on The Hacker News.
Apple has updated its security releases page with details of the vulnerabilities addressed in today’s updates to iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and Safari. Here are the details. more…
DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface.
Proton’s Black Friday deals give you a chance to save on its VPN or alternatively, on its entire suite of privacy-first tools.
Surfshark data shows blocks of one fake TikTok Shop domain rose 638% between May and September, as phishing exposure climbs across Europe and the US ahead of Black Friday.
A malicious update could infect millions of devices without users ever knowing.
A critical flaw dubbed ‘HTTP2Shell’ in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code.
Cybersecurity researchers are calling attention to what they say is a “recurring social engineering pattern” across hundreds of cases in which threat actors use Microsoft Teams’ external chat creation feature to conduct impersonation scams or to deliver malware.
This2Shell, That2Shell, Everything2Shell. That’s pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere.
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project’s maintainers say.
The Guardian Technology
71 active sources
26 Turkish · 45 English
All sources
