CVE-2026-109618 and CVE-2026-109619: watchTowr confirms leaked CVSS 10 PHP RCE zero-days. Patches due October 22; only PHP 8 ...
Google Cloud's London outage, caused by a power event, disrupted Revolut, HSBC, Lloyds, Royal Mail and DPD. Here's what ...
The Go team released emergency updates late Monday that caused the language’s certificate verifier to reject eight ...
Laravel has disclosed a critical authentication bypass in its built-in token API guard that lets unauthenticated attackers ...
The flaw, tracked as CVE-2026-106173, is a path traversal issue that Fortinet rated critical (CVSS 9.4) and patched on ...
OVHcloud CLI v0.11.0–v0.15.0 were swapped for a secrets stealer via a GitHub account researchers link to GlassWorm. Who’s ...
Microsoft’s OneDrive update adds Copilot reports and file organising, Hero Link sharing, 1M-item sync and an odsync admin CLI ...
Citizen Lab confirms Pegasus spyware hacked Belgrade University rector Vladan Đokić’s iPhone; Apple warned Trump Tower case ...
Broadcom’s unpatched WPSplinter WPS flaw lets attackers in Wi-Fi range run code as root on millions of routers. No CVE, no ...
Leaked Cellebrite flyer details Advanced Unlocks, an appliance said to unlock iPhone 11–16 from 8 metres, even with Stolen ...
Claude Code found an XMRig crypto miner using 12 cores and pushing a Mac to 112°C while building a temperature app. How it ...
Attackers are using UpdraftCentral keys stolen in the TeamUpdraft breach to install WordPress backdoors. No plugin update ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results