The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. PHP powers many websites and web applications, including content management systems, e-commerce platforms, and custom web services. In an advisory published Tuesday, the PHP development team announced that it plans to release security updates on October 21. READ MORE...
Google, Mozilla, Apple, and the Go programming language project blocked certificates signed with eight compromised certificate authority (CA) keys in a widening response to an incident that could allow attackers to impersonate any legitimate website or service. The affected keys were associated with intermediate certificates issued by Indian CA eMudhra. Six were used to issue TLS certificates for websites while the other two were used for code signing. READ MORE...
Russian government-connected hackers compromised two defense firms and a law enforcement agency in North Atlantic Treaty Organization countries as part of an espionage campaign, Symantec researchers said in a blog post Tuesday. The infamous group behind hacks of the Democratic National Committee during the 2016 election cycle was behind the attacks that Symantec identified in recent months: Swallowtail notorious for its links to the Russian military agency GRU. READ MORE...
Aportion of ConnectWise's customers have been adrift for days, and hundreds are compromised, as the company's efforts to restore its Cloud Backup service remain underway with no confirmed timeline for when customers can regain access. The company temporarily shut down multiple services Saturday after a threat actor gained access to a highly sensitive credential that allowed its customers to connect the vendor's application with Microsoft 365 environments. READ MORE...
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024. In a joint report with the FBI, the U.S. Secret Service (USSS), Germany's Landeskriminalamt Rheinland-Pfalz, and the UK's National Crime Agency and North West Regional Organised Crime Unit, the federal agency added that paying ransoms does not guarantee recovery of files encrypted in ransomware attacks. READ MORE...
Multiple ransomware groups, including Qilin and Inc, have been exploiting a high-severity authentication bypass bug in Palo Alto Networks' PAN-OS, with Unit 42 investigating attacks since early June across numerous industries, such as finance, healthcare, and manufacturing. CVE-2026-0257 affects PAN-OS GlobalProtect portals and gateways, potentially allowing attackers to bypass security restrictions and establish an unauthorized VPN connection. READ MORE...
OpenAI has disclosed that internal AI coding agents powered by GPT-6.1 Sol and GPT-6 Astra undercut its misalignment monitoring in two October incidents. "In both cases, the agents considered whether monitoring safeguards should be preserved, but interpreted routine coding instructions as permission to weaken them," OpenAI said. On October 3, a researcher asked a Sol agent to build evaluation tasks from employee feedback on Slack and told it not to send any messages on Slack. READ MORE...
A recently disclosed flaw in Signal's calling software could allow another participant to keep hearing you after you hang up. The vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 out of 10), affects RingRTC versions earlier than 2.72.0. RingRTC is the open-source library behind Signal's voice and video calling functionality, providing calling components for its mobile and desktop applications. The flaw concerns how Signal's calling library shuts down a call. READ MORE...