PHP Warns of Two Critical Flaws and Sets a 14:00 UTC Patch, but the Leak, the Score and the Exploitation Reports Do Not Agree
PHP’s security team says a release fixing two critical flaws,...
Browse Category
News
News from AI, cybersecurity, cloud infrastructure, and software ecosystems, with concise reporting on the developments builders and operators should track.
278 Articles
An Anonymous Comment Can Hand Duplicator a Payload That Fires at Migration Time, and Under a Third of Free Installs Run the Fix
Wordfence says CVE-2026-82814 lets an anonymous comment plant a...
DHS Orders Federal Civilian Agencies to Remove DeepSeek in an Order That Carries a July 24 Release Date
DHS’s FASCSA order excludes DeepSeek from federal civilian...
Open Cairn Panels Exposed a Hacker’s AI Agents, Which Reuters Says Breached 100+ Sites, and Cairn’s Server Has No Login
NorForge found more than 20 exposed panels for Cairn, an...
Attackers Holding UpdraftCentral Keys Are Installing Backdoor Plugins on WordPress Sites, and No UpdraftPlus Update Stops It
Nethemba and Patchstack report that an attacker holding valid...
Attackers Are Exploiting a Root-Level Flaw in SiteGuard Server Edition, and Updating May Erase the Evidence
EG Secure Solutions says attackers are already exploiting...
Drupal Patches a Critical Code-Execution Flaw That Core Alone Cannot Reach, and Unsupported Branches Get No Fix
Drupal’s October 14 releases fix a critical code-execution flaw...
A Compromised ConnectWise Cloud Backup Credential Let Attackers Sign In to Microsoft 365 Tenants as the Backup App
ConnectWise is shutting off Cloud Backup after attackers used...
Some Rank Math PRO 3.0.123 Downloads Carried Malware for 11 Hours, and Updating Will Not Clean an Infected Site
Rank Math says PRO 3.0.123 copies downloaded in an 11-hour...
PostgreSQL 19 Slips to November 19 After Late Reverts, and AI Code Review Is Only Part of the Story
PostgreSQL 19 now ships on November 19. The release team cites...