Cybersecurity
Every day we read hundreds of stories. Only the most important ones are here — short, in our own words, with a link to the original source.
- Cybersecurity · Networking · Programming & dev tools
Critical PHP flaws put NAS devices at risk
Attackers are actively exploiting two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619) against internet-exposed NAS devices. They could allow code execution without login; PHP released updates on October 21, but not every vendor has a fix.
Full story at AppleInsider ↗ - Artificial intelligence · Cybersecurity
OpenAI teams up with Poland's NASK on AI safety
OpenAI and Poland's NASK are partnering on AI safety, security and technical research. The aim is to strengthen safeguards and support a more resilient digital ecosystem.
Full story at openai.com ↗ - Cybersecurity
PHP flaws hit one in ten organizations
Two critical PHP vulnerabilities called PHP2Shell are being actively exploited after details leaked early, according to Check Point Research. Ten percent of organizations worldwide have been targeted, with Europe hit hardest.
Full story at blog.checkpoint.com ↗ - Artificial intelligence · Cybersecurity · IT industry & companies
US banks restrict AI agents using customer logins
Major banks including Morgan Stanley and JPMorgan are limiting AI agents that log in using customer credentials, sometimes without explicit instruction. Most banks plan to allow such agents only read-only access.
Full story at The Decoder ↗ - Cybersecurity · Artificial intelligence
Hacker used AI agents to attack over 100 companies
A Chinese-speaking hacker used autonomous AI agents to carry out attacks on more than 100 companies, including John Deere and Cummins. The case illustrates how AI agents dramatically increase what a single hacker can achieve.
Full story at Futurism ↗ - Cybersecurity · Software & updates
Chrome adds new warnings for suspicious sites
Google announced new Chrome safety features, including alerts for suspicious websites and full-screen red warnings for known dangerous sites. The update also adds Gemini-powered scam alerts.
Full story at Android Central ↗ - Cybersecurity · Software & updates
Chrome adds warnings for insecure HTTP sites
Google updated Chrome to warn users before they access insecure HTTP connections. The change aims to improve browsing security.
Full story at blog.google ↗ - Cybersecurity · IT law & regulation · Networking
Cloudflare gets South Korea security certification
Cloudflare obtained South Korea's ISMS-P certification after a ten-day audit covering 80 controls by KISA. It confirms to Korean customers that Cloudflare's security and privacy program meets local standards.
Full story at blog.cloudflare.com ↗ - Cybersecurity · Artificial intelligence · Enterprise software
Anthropic expands Claude Security for enterprises
Claude Security for Enterprise customers now includes continuous scanning and fix tracking. Anthropic also added editable threat models and API/MCP integrations.
Full story at TestingCatalog AI News ↗ - Cybersecurity · Networking
Cloudflare WAF adds full transaction detection
Cloudflare expanded its WAF with full transaction detection and new response rules. The features help identify exploitation attempts and block malicious responses before they reach users.
Full story at blog.cloudflare.com ↗
An AI writes the short texts from the source's stories.
Free by e-mail
Choose your topics. You only get the most important news on them.