Cybersecurity News
-
New PHP Vulnerability Remains Unpatched After Critical Security Updates
A new security vulnerability in PHP could allow attackers to execute malicious code on certain web servers, even after administrators installed the critical security updates released earlier this week. The PHP development…
-
PHP Releases Security Updates for Critical Flaws That Could Allow Server Takeovers
Security updates have been released for two critical vulnerabilities in PHP’s core engine that could allow attackers to take control of vulnerable web servers without authentication. The fixes, published on October 21,…
-
Fix Released for Critical Signal Bug That Could Keep Audio Active Call Ends
A fix has been released for a critical vulnerability in Signal’s calling software that could allow another participant to continue hearing audio after a user hangs up, potentially exposing private conversations. According…
-
AI-Powered Cyberattacks Target Over 1,200 Websites, Researchers Reveal
Cybersecurity researchers at NorForge have uncovered extensive evidence of AI-assisted cyberattacks targeting businesses worldwide. The investigation, published on October 19, 2026, reveals how attackers are using automated AI agents to identify vulnerabilities,…
-
ConnectWise Suspends Cloud Services After Hackers Access Microsoft 365 Customer Environments
ConnectWise has suspended three cloud services following a cybersecurity incident in which attackers exploited compromised application credentials to gain unauthorized access to customer Microsoft 365 environments, disrupting backup, security monitoring, and administrative…
-
Critical Linux Kernel Vulnerability Allows Virtual Machines to Access Host Memory
A critical security vulnerability in the Linux kernel could allow attackers operating inside virtual machines to extract sensitive information from the underlying host system, potentially undermining the isolation protections used by cloud…
-
Malicious Code Found in Rank Math WordPress SEO Plugin Download
Rank Math has disclosed that some downloads of its Rank Math PRO WordPress SEO plugin contained malware, potentially compromising websites that installed and activated the affected files. The incident involved version 3.0.123…
-
Microsoft Patches Exploited Windows Zero-Day in Record October Security Update
Microsoft has released its largest Patch Tuesday security update, fixing 1,413 vulnerabilities across Windows and other products, including a Windows security flaw already being exploited in real-world attacks. The October 2026 release…
-
HTTP/2 Vulnerability Fixed in curl That Could Allow Remote Execution
The curl project has released a security update addressing a high-severity vulnerability that could allow a malicious server to execute code on a computer uploading data over HTTP/2. The flaw affects both…