News

Upcoming Events

All times are Eastern Time (GMT/UTC -4h)

DigiCert data breach exposes customer information, identity documents
a server migration exposed an internal business system to the internet, allowing unauthorized access to PII...Read more

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
Tracked as CVE-2026-111497 the flaw allows crafted compressed data to overwrite past end of buffer and corrupt memory...Read more

There's a third PHP2Shell bug, but it won't get an emergency fix
researchers have found a 3rd PHP vulnerability that could allow attackers to take over websites or remotely run malware...Read more

Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack
The company's bots were breaking into model-hosting platform Hugging Face. The safeguards weren't nearly strong enough....Read more

As AI Risks Grow, Insurers Split on Covering the Damage
Insurers are split on AI risk: some build specialized agentic AI coverage, while major carriers quietly exclude it — lea...Read more

Compromised TLS Certificates
The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers study...Read more

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
The flaw, CVE-2026-112900, is in the way Pillow handles EPS images...Read more

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
zero-day SQL injection flaw in VCO, tracked as CVE-2026-114625 and rated 9.9 on the CVSS scale....Read more

Max-severity GitLab bug allows remote code execution over 12 years of releases
The integer overflow bug, tracked as CVE-2026-110264,...Read more

PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
The new issue, assigned CVE-2026-115560, affects only web apps configured in an unusual way,...Read more

PHP2Shell puts dozens of UK government services out of service
Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise Carly Page...Read more

BIND 9 Flaw CVE-2026-94300 Opens DNS Servers to RCE
The GSS-TSIG memory corruption bug affects every BIND release since 9.11.0, has no workaround, and won’t be fixed...Read more

Claude Security can now spot vulnerabilities that reappear in code
Anthropic has updated Claude Security with ongoing code scanning and automatic fix tracking to help security teams...Read more

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
eMudhra, an Indian CA, will withdraw from its global SSL/TLS certificate business, its board decided on Thursday...Read more