PHP exploitation moves at slower-than-expected pace, but millions remain at risk
October 23, 2026
Security researchers flag botnet activity, but successful compromises have yet to break through.
Read Article →
Cybersecurity Help for Home Users and Small Businesses
Follow us on Facebook
Security researchers flag botnet activity, but successful compromises have yet to break through.
Read Article →AI-powered attacks and hidden supply-chain weaknesses are making insurers’ work more difficult, according to a new report.
Read Article →Researchers said the hackers employed a powerful AI tool to accelerate and scale the attacks against hundreds of Microsoft 365 users.
Read Article →Exposed email addresses could put CAPCOM ID users at risk of phishing. Passwords were also changed without permission on 196 accounts.
Read Article →A Crime Stoppers chapter has stopped accepting tips after a breach exposed information about anonymous tipsters.
Read Article →Users were misled about who could access their personal information on Facebook. Now Meta has been ordered to pay $25 billion.
Read Article →This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
Read Article →The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allow...
Read Article →PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod...
Read Article →Unauthorized third-party AI agents are accessing banks in the United States, with some attempting to act independent of user instructions.
Read Article →Quest Diagnostics, a diagnostic information services provider, revealed it experienced a cyber breach.
Read Article →PHP, which is used in most major operating systems, has issued fixes for two critical vulnerabilities. Security leaders discuss.
Read Article →Two critical bugs in the PHP web programming language, used by the majority of the internet, threatened to upend the internet — and it's unlikely to be the last major software scare.
Read Article →Quest is the latest in a series of healthcare technology companies that have been hacked in recent months.
Read Article →Microsoft points the blame for ConnectWise's breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.
Read Article →A cybersecurity researcher explains how a flaw in widespread software makes millions of websites vulnerable to hackers – and underscores the role of AI in attacking and defending the internet.
Read Article →Millions of websites and online tools have relied on the PHP language for decades – but newly disclosed bugs could let hackers easily take them over.
Read Article →The Manage My Health hacking breach exposed weaknesses in New Zealand’s digital defences. But the rise of autonomous AI agents poses a very different threat.
Read Article →Comments
Read Article →Comments
Read Article →Comments
Read Article →A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.
Read Article →Governments and businesses around the world scrambled to prevent hackers from exploiting a vulnerability in PHP, a popular programming language.
Read Article →The disclosure heightened concerns about A.I.’s potential to upend cybersecurity unless shortcomings are addressed.
Read Article →