The Hacker News (1 hour ago)
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed “anomalous activity” related to systems that store customer environment variables.
Read the full story on The Hacker News.
Everything you need to know about PHP2Shell in terms of what it is, and what this security flaw means for the average person browsing the web.
Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.
Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed
Resident Evil, Street Fighter, and Monster Hunter publishers Capcom have revealed that a data breach has seen a third-party gain access to information associated with more than 11 million Capcom ID accounts.
Major websites are going offline as they attempt to patch a huge PHP vulnerability. Here’s what we know.
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer’s Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) servers to add outside tools, and such code would run with the developer’s own access.
LiteLLM on Wednesday disclosed that threat actors compromised “multiple independent security controls” to push a malicious version of the Python package containing a credential stealer and a backdoor.
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws.
A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code.
72 active sources
27 Turkish · 45 English
All sources
