The PHP programming language is preparing to release two critical emergency patches to address vulnerabilities that could allow for remote code execution on affected websites. This proactive measure follows reports of a potential "PHP2Shell" exploit, which, if confirmed, could pose a significant threat to numerous online platforms.
In parallel, the internet is on high alert due to the discovery of eight compromised Transport Layer Security (TLS) certificates. These compromised intermediate certificates could enable malicious actors to issue fraudulent web credentials for any server, undermining the trust and security of online communications. The discovery has prompted widespread concern and a call for immediate action to revoke and replace the compromised certificates.
PHP Rushes Emergency Patches as Major Vulnerability Leaked
14 stories · 7 sources
#cyber #ransomware #securityOther digests
- 2026-10-21 — PHP Rushes Emergency Patches as Major Vulnerability Leaked
- 2026-10-20 — Compromised TLS Certificates Trigger Widespread Internet Security Alert
- 2026-10-19 — California Secures $6 Million Settlement in 23andMe Data Breach Case
- 2026-10-18 — US Warns Europe on Starlink Restrictions Amid Cybersecurity Concerns
- 2026-10-17 — OpenCode User Credentials Compromised in Data Breach
- 2026-10-16 — NIST Elliptic Curves Seeds Bounty Claimed Amid Cybersecurity Concerns
- 2026-10-15 — Mercenary Spyware Delivered Via Targeted Ads Confirms New Cyber Threat Vector
- 2026-10-14 — Starlink Site Fire in Bulgaria Follows Suspected Polish Sabotage, Drone Attacks Sink Ships
- 2026-10-13 — Saudi National Charged with Planting Spy Device in OpenAI Office
- 2026-10-12 — Cyber Attack Thaws French Supermarket Refrigerators, Spoiling Food
- 2026-10-11 — Security Experts Warn Against Widespread Adoption of Passkeys
- 2026-10-10 — Ledger Investigates Crypto Thefts Amid Suspicions of Wallet Tampering
- 2026-10-09 — Tor Project Partners with Mullvad VPN Amidst Cybersecurity Concerns
- 2026-10-08 — Asos Data Breach Exposes Customer Names, Search Histories After Hacker Notification
- 2026-10-07 — Shaquille O'Neal Warns of Hacking Risks After Personal Breach
- 2026-10-06 — Asos Alerts Customers to Phishing Scams Amid Data Breach Concerns
- 2026-10-05 — Iran Claims Disruption of Starlink Terminals During Internet Blackout
- 2026-10-03 — US Tech CEO Arrested for Alleged $300M Nvidia Chip Smuggling to China
- 2026-10-02 — Micro Center Demands ID, No-Export Pledge for High-End Nvidia GPUs
- 2026-10-01 — Two Federal Agencies Hacked, Exposing Sensitive Data in Month of Breaches
- 2026-09-30 — Critical Zimbra Flaw Allows Attackers to Steal Emails Via Remote Command Injection
- 2026-09-29 — Australia Orders Urgent Cyber-System Review After OpenAI Medicare Breach
- 2026-09-28 — Citrix Warns of Exploited NetScaler Zero-Days; Medicare Breach Discovered via OpenAI
- 2026-09-27 — Citrix NetScaler Zero-Days Exploited in Active Attacks; Rolls-Royce Reactor Safety Hardware Secured
- 2026-09-26 — FBI Data Breach Exposes Agent Details; Crypto Exchange Loses $390M
- 2026-09-25 — Bitget Exchange Loses $390 Million in Suspected North Korean Cyberattack
- 2026-09-24 — Small Businesses Lag in Website Security, Sourcehut Suffers Account Takeover
- 2026-09-23 — FBI Investigates Data Breach; Hackers Claim Sensitive Agent Information Stolen
- 2026-09-22 — Hospital Maternity Records Lost; FBI Data Breach Claimed; WordPress Vulnerability Found
- 2026-09-21 — Major US Airports Grounded by Fiber Line Cut, Raising Infrastructure Security Concerns