The PHP project moved its security release forward after an accidental proof-of-concept leak exposed critical vulnerabilities that went unfixed for years due to organizational failures.
Read the full story on Neowin.
It has been a dramatic, public and global response, but the cyber event hasn’t happened yet.
‘500 new vulnerabilities’ found in government, says AI minister
Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.
ESET linked hackers to Russia, using a decentralised network to hide their malware during an attack on a Ukrainian grain company. The security company says it is the first documented case of a state-linked hacking group using the Yggdrasil network in this way.
Misaligned incentives led to an intractable argument
Initial attempts were observed on October 17, and mass activity began shortly after patches were released.
eBay has announced plans to cut 1,000 jobs as part of a restructuring effort. The move follows 800 job cuts in February as tech companies continue tightening headcounts.
Following patches for critical PHP remote code execution vulnerabilities, Cloudflare recorded millions of exploit attempts within hours. Update immediately or take affected sites offline.
Microsoft Entra ID is retiring native SMS and voice MFA due to phishing risks. Organizations must adopt passkeys or bring in third-party telecom providers to avoid user lockouts.
CD Projekt RED’s surprise Cyberpunk 2077 2.5 update brings cross-platform mod support to consoles, dual-wielding pistols, Edgerunners quests, and more.
72 active sources
27 Turkish · 45 English
All sources
