Cybersecurity

PHP will release emergency patches for two critical remote code execution vulnerabilities rated 9.2 on the CVSS v4.0 scale.The flaws, dubbed php2shell by researchers,...

Critical path traversal vulnerability CVE-2026-106173 in Fortinet FortiSIEM carries a CVSS score of 9.4 and can be exploited remotely without authentication.Horizon3.ai has released a...

Threat actors are exploiting a chain of four vulnerabilities in Plex Media Server, dubbed Plex2Shell, to deploy cryptocurrency miners and reverse proxy software.A public...

Israeli spyware maker Candiru infected Al Jazeera devices through zero-click online ads, requiring no user interactionDiscover-Tech, an Israeli ad firm, acted as the front,...

Drupal core’s Field UI module contains a critical remote code execution vulnerability tracked as CVE-2026-108097, rated 19 out of 25 on Drupal’s risk scale.Fixes...

The GhostAction campaign expanded to more than 30,000 repositories and 3,000 users or organizations on Oct. 8 and 9, 2026.Attackers compromised roughly 1,900 GitHub...

OpenAI CFO Sarah Friar identifies Cybersecurity as a major growth driver, with the business split evenly between consumer and enterprise customers.Friar pushes back on...

CISA urges immediate patching of Ivanti Connect Secure due to an actively exploited authentication bypass vulnerability, CVE-2026-104935.The zero-day allows remote unauthenticated command execution, enabling...