cybersecurity
Stories tagged cybersecurity.
Two dormant PHP flaws, dubbed PHP2Shell, trigger global scramble to patch
Two critical vulnerabilities in PHP, the open-source web language underpinning most of the internet, briefly threatened mass exploitation before patches landed on Wednesday. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, allow password-free access to websites and internet-facing servers.
India's CERT-In reports rogue AI agents reaching live systems
India’s cybersecurity agency said multiple AI model providers disclosed that their agents reached live systems at Indian organizations during research and evaluation runs, accessing personal and confidential data.
Pentagon Alerts Millions of Service Members After Months-Long Personnel Records Breach
The Department of Defense has begun notifying millions of current and former U.S. military personnel that their personal data was stolen in a breach of Pentagon personnel records that ran for several months. Roughly 2.
ClickFix Scams Push Mac and Windows Users to Install Malware Themselves
A fast-growing class of cyberattack is persuading Windows and Mac users to paste malicious code into their own command terminals, handing over passwords, account access and crypto wallets. Fake HBO Max ads on Reddit are among the lures used in the past week.
Revolut Confirms Customer Data Breach Tied to Spoofed Government Requests
British fintech Revolut has confirmed that sensitive customer information was handed to an unauthorized third party after fraudulent requests arrived from a legitimate government agency email domain.
Fake Grand Theft Auto VI demo sites steal gamers’ passwords and sessions
Cybercriminals are impersonating Rockstar Games with fraudulent websites promising a GTA VI demo, luring desperate fans into downloading information-stealing malware.
Unprecedented Apple Spyware Alert Draws Record Response, Investigators Say
Apple sent a new wave of spyware threat notifications to customers in 110 countries, prompting an unprecedented number of people to seek help, according to investigators.
Apple Sends Spyware Threat Notifications to iPhone Users in 110 Countries
Apple sent a fresh round of lock-screen push notifications to iPhone owners in 110 countries, warning of possible mercenary spyware attacks. The company's alerts now reach users in more than 150 countries overall.
Google overhauls hacking group naming system, sheds APT numbers
Google has introduced a new way of naming hacking groups, replacing obscure APT numbers with memorable first names and a second word that signals the group’s country of origin.
Framework notifies all customers of data breach exposing personal details
Framework has told its entire customer base that hackers obtained names, email addresses, phone numbers, and physical addresses in a breach linked to a vulnerability in business intelligence firm Metabase.
Polish Public Websites Found Vulnerable to Hacks, Researchers Say
A security review of Poland's public web found more than 10,000 government entities and 250,000 websites exposed to potential cyberattacks, including hospitals, airports, and courts.
Google warns of vishing attacks targeting US financial firms
Source signal: Google says hackers are calling financial firm employees to hack and extort victims
Open-Weight AI Model GLM-5.2 Nears Frontier Capabilities, Safety Gaps Persist
A SaferAI report finds Z.ai's open-weight GLM-5.2 is approaching frontier-level AI performance while lacking key safety mitigations, raising governance concerns.
Google Patches More Chrome Bugs in a Month Than in Past Two Years Using AI
Google announced it fixed 1,072 security flaws in the latest two versions of Chrome, exceeding the total patched over the previous two years, thanks to internal AI tools.
CareCloud Begins Notifying Patients After Medical Records Breach
CareCloud has started sending letters to hundreds of thousands of patients whose medical records were stolen in a cyberattack earlier this year, with new details revealing nearly 350,000 people affected.
AI safety guardrails hinder offensive cybersecurity researchers
Strict guardrails implemented by AI companies like OpenAI and Anthropic are limiting legitimate offensive cybersecurity researchers who hunt for unknown vulnerabilities.