A breach of an open source database provider may have inadvertently highlighted a serious gap in the way companies think about their cloud security. On Oct. 19, software maker PingCAP, which sells an SQL database program called TiDB, disclosed that it had been breached. According to PingCAP's website, it serves major American corporations like Atlassian, Square, and Pinterest, as well as major players in China's artificial intelligence (AI) space, including Manus, Kimi, and more. READ MORE...
A Dell order confirmation lands in your inbox and it looks pretty legitimate: it comes from Dell's order domain, passes DKIM and DMARC checks, uses Dell's real template, and confirms a $736.09 purchase of Microsoft Project Standard 2024 that you never made. Under "Ship To," where an address should be, sits the word "Helpline" and a phone number - the hook for a callback scam. The email looks genuine because it is. READ MORE...
An Indian company's serious error in creating high-level encryption certificates has prompted major web browsers to block the certificates before hackers can use them to spoof websites. The issue involves intermediate certificates created by the Indian firm eMudhra, a company with the authority to issue certificates that are trusted by Google Chrome, Microsoft Edge, Mozilla Firefox and other browsers. READ MORE...
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers. The company confirmed on October 20 that an unauthorized third party installed "malicious programs" in some customer environments. After detecting the intrusion, the company says it progressively shut down customer servers beginning at 04:00 local time on October 21, 2026. READ MORE...
The FBI and the Cybersecurity and Infrastructure Security Agency warned that SafePay has expanded its attacks against critical infrastructure providers to become one of the world's most active ransomware operations. Since 2024, Safepay has struck more than 600 critical infrastructure providers, with particular focus on North and South America, Europe and Australia, according to an advisory issued jointly by U.S. and European authorities. READ MORE...
Our tale comes courtesy of red team and pen testing specialist Dahvid Schloss, who currently serves as COO of Suzu Labs, a cybersecurity company that boasts "we break your systems before adversaries do." Over a career spanning more than 15 years, Schloss has assessed the security of numerous businesses, including a large US pharmacy retailer that he asked us not to name. He wasn't asked to break in, just to do an audit on all of the org's corporate switches, routers, and firewalls. READ MORE...
Critical vulnerabilities in the PHP web scripting language could allow hackers to take control of any website running the widely used software, PHP's developers said on Wednesday, as they released emergency updates that sent website owners scrambling to fix the flaws. "All PHP users are strongly encouraged to update immediately," the developers said in a security advisory about the new versions, which fix vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. READ MORE...
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. This security issue is tracked as CVE-2026-110264 and was reported by a security researcher using the 'joaxcar' handle through GitLab's HackerOne bug bounty program. CVE-2026-110264 stems from an integer overflow weakness in GitLab's Regular Expression Compiler. READ MORE...