Websites are temporarily going offline as admins address two critical PHP flaws that could let attackers run malicious code on their servers.
FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure
The group has been linked to a 2025 attack targeting technology firm Ingram Micro.
Huntress Expands Ingram Micro Partnership Across Canada and Latin America
Cybersecurity company Huntress has expanded its distribution partnership with Ingram Micro into Canada, Latin America and the Caribbean, strengthening its…
Hacker Conversations: Corey Thuen and the Evil Bit
Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.
Nigerian Hacker Sentenced To Eight Years For Fraud And Identity Theft
A Nigerian man has been sentenced to eight years in a U.S. prison for his role in wide-ranging hacking, tax fraud, identity theft, and investment fraud…
Hackers Were Targeting Critical PHP Vulnerabilities Days Before They Were Patched
A threat actor tried to exploit two critical PHP vulnerabilities four days before the flaws were publicly disclosed and patched, according to Amazon…
When the attacker becomes the user: Rethinking account takeover
SPONSORED FEATURE: AI makes phishing easier than ever
eMudhra Exits Global SSL/TLS Certificate Business Following the Vulnerability Disclosure
eMudhra Limited has announced it is exiting the global SSL/TLS certificate business after disclosing weak private keys in eight intermediate certificate…
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
One in three people now tune out scam warnings, and scammers are counting on it.
Claude Security Now Scans Repositories Continuously to Find Flaws and Track Fixes
Anthropic has updated Claude Security so it can keep checking connected code repositories as they change, rather than waiting for a person to start each…
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and…
European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
The operation, codenamed Operation CANTABRIA, underscores the success of strong cooperation between European and Ecuadorian law enforcement agencies,…
Salt Security wins three InfoSec Innovator awards
Salt Security has won three categories at Cyber Defense Magazine’s 2026 Top InfoSec Innovators awards, recognising its work in agentic AI and API…
New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity
Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio that generates phishing lures and decoy content…
PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities
PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers…
LiteLLM Compromised- Credential Steals Through Supply Chain Attack
HOC Shorts | The Incident: The widely used AI developer tool LiteLLM compromised in a software supply chain…
PHP2Shell: What the Vulnerability Means and Why Patching Is Urgent
Two critical security vulnerabilities in the core of PHP affect a large proportion of websites – from personal WordPress blogs and online stores to…
ClickFix has never been bigger, and AI tools are its most convincing lure yet
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into…
php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619
CVE-2026-109618 and CVE-2026-109619 are critical PHP core RCE flaws that leaked ahead of disclosure. We cover what is verified, why exploitation converges…
Machine speed attacks require machine speed detection and response
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks…
IT Security News Hourly Summary 2026-10-22 17h : 34 posts
34 posts published in the last hour 14:36Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year 14:35How to conduct a cyber-resilience assessment 14:35Critical PHP vulnerabilities patched today 14:35Ransomware Gangs Exploit GlobalProtect VPN Flaw — What…
Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year
Contern, Luxembourg, 22nd October 2026, CyberNewswire
How to conduct a cyber-resilience assessment
Given growing concerns about cyberattacks and the effect of AI on cybersecurity, enterprise CISOs should periodically review and update their…
Critical PHP vulnerabilities patched today
PHP developers are releasing emergency security patches today to address two critical vulnerabilities in the widely-used programming language that powers…