Cybersecurity
Every day we read hundreds of stories. Only the most important ones are here — short, in our own words, with a link to the original source.
- Cybersecurity · Programming & dev tools · Cloud & data centers
Two critical PHP flaws allow remote code execution
DigitalOcean warns of two critical RCE vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, disclosed on October 21, 2026. Proof-of-concept exploit code is public, and only updating to a patched PHP version fully protects servers.
Full story at digitalocean.com ↗ - Cybersecurity · Programming & dev tools
Check Point flags critical PHP vulnerabilities
Check Point describes two critical PHP remote code execution flaws, CVE-2026-109618 and CVE-2026-109619. An IPS protection has been released, and the post urges updating to the latest version.
Full story at blog.checkpoint.com ↗ - Cybersecurity · Networking
ESET finds Russia-linked hackers using Yggdrasil
ESET links an attack on a Ukrainian grain company to hackers tied to Russia. They hid their malware in the decentralised Yggdrasil network, which ESET calls the first documented case for a state-linked group.
Full story at TNW ↗ - Cybersecurity · Programming & dev tools
Akamai reports critical remote code flaws in PHP
Akamai describes critical vulnerabilities in the PHP core that allow remote code execution. The text gives no further details.
Full story at Akamai ↗ - Cybersecurity
Over 1.5 million Crime Stoppers tips leaked in Canada
A CBC investigation found over 1.5 million tips from the past 25 years were exposed in a larger data breach. This includes personal information of some tipsters.
Full story at MobileSyrup ↗ - Cybersecurity · IT law & regulation
Waze ban for civil servants in Malaysia.
The government has prohibited civil servants from using Waze due to security considerations. Google Maps remains permitted as it falls under different legal jurisdictions.
Full story at SoyaCincau ↗ - Cybersecurity · Software & updates · Artificial intelligence
Critical security flaw discovered in PHP.
Security researchers have used AI to uncover two severe vulnerabilities in PHP. Affected web servers are advised to apply patches immediately to prevent potential exploitation.
Full story at Futurism ↗ - Cybersecurity
Apple blocks insecure certificates
Apple has blocked compromised security certificates issued by eMudhra. This action prevents attackers from impersonating websites and deceiving users.
Full story at MacRumors ↗ - Cybersecurity · Software & updates
Cloudflare protects against PHP flaw
Cloudflare has deployed mitigations against the PHP vulnerability known as php2shell. This flaw could potentially allow attackers to gain remote control over web servers.
Full story at blog.cloudflare.com ↗ - Cybersecurity · Artificial intelligence
AI agents hijack language models for attacks
Security researchers identified AI agents that exploit unprotected language models to launch automated cyberattacks. These agents can compromise servers and install malicious software.
Full story at The Decoder ↗
An AI writes the short texts from the source's stories.
Free by e-mail
Choose your topics. You only get the most important news on them.