PHP2Shell is a warning shot for vulnerability disclosure
Keeping secrets is difficult in an open world, but we’ve done it before and must do it again
Read the full story on The Register.
Keeping secrets is difficult in an open world, but we’ve done it before and must do it again
Read the full story on The Register.
Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes.
The “Steal My Bitcoin” challenge offers a bounty to anyone who can breach a deliberately vulnerable PHP website using the recently disclosed PHP2Shell flaws.
What makes them safer – and where they fall short
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found.
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.
The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub.
Aiven hopes to do for LLMs what it does for databases
Techies tiptoed around server to keep it working as company sank
Advertises for someone to ‘own cost-effective alternative virtualisation platform’
PLUS: Regional internet registry reform nears; Trustworthy-sounding domains attract scammers
71 active sources
26 Turkish · 45 English
All sources