2026

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

Uncategorized /

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification 2026-10-22 at 13:01 By A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory […]

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification Read More »

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

Uncategorized /

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed 2026-10-22 at 13:01 By Amazon’s Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in the wild following […]

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed Read More »

PHP2Shell Exploitation Started Days Before Patches

exploited, Featured, PHP, PHP2Shell, Vulnerabilities /

PHP2Shell Exploitation Started Days Before Patches 2026-10-22 at 12:48 By Ionut Arghire Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell Exploitation Started Days Before Patches Read More »

(Noise) cancel culture: These are the very best headphones to survive the subway and more

Uncategorized /

(Noise) cancel culture: These are the very best headphones to survive the subway and more 2026-10-22 at 12:30 By Angela Tricarico Which pair of headphones drowned out the sound of the city? This article is an excerpt from Latest Technology News | New York Post View Original Source

(Noise) cancel culture: These are the very best headphones to survive the subway and more Read More »

Anker’s MagGo Power Bank 2 Pro ‘made it here’: The best power bank for daily life

Uncategorized /

Anker’s MagGo Power Bank 2 Pro ‘made it here’: The best power bank for daily life 2026-10-22 at 12:30 By Barret Wertz Can it keep a New Yorker’s phone alive from the first swipe of the day to the last train home?  This article is an excerpt from Latest Technology News | New York Post […]

Anker’s MagGo Power Bank 2 Pro ‘made it here’: The best power bank for daily life Read More »

PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution

Uncategorized /

PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution 2026-10-22 at 12:11 By Threat Hunter Team, Symantec Security Response Patch now: CVE-2026-109618 and CVE-2026-109619 let unauthenticated attackers run code on web servers running PHP, and details were public before fixes shipped. This article is an excerpt from SECURITY.COM View Original Source

PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution Read More »

Anthropic finds 94 cases where open-source projects drop security controls without warning

agentic AI, AI, Anthropic, cybersecurity, News, open source, report, security controls, software development /

Anthropic finds 94 cases where open-source projects drop security controls without warning 2026-10-22 at 12:10 By Anamarija Pogorelec Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving unnecessary exposure, conflicting settings, and […]

Anthropic finds 94 cases where open-source projects drop security controls without warning Read More »

PHP flaw draws millions of exploit attempts, Cloudflare CEO warns

Latest News /

PHP flaw draws millions of exploit attempts, Cloudflare CEO warns 2026-10-22 at 12:06 By Cointelegraph by Zoltan Vardai Cloudflare’s Matthew Prince said the network saw thousands of exploit attempts even before the PHP vulnerability was publicly disclosed. This article is an excerpt from Cointelegraph.com News View Original Source

PHP flaw draws millions of exploit attempts, Cloudflare CEO warns Read More »

Signal flaw could expose audio and video even after users hang up

mobile apps, News, Signal, vulnerability /

Signal flaw could expose audio and video even after users hang up 2026-10-22 at 11:39 By Sinisa Markovic A flaw in Signal’s calling library could let the other person on a call keep receiving a user’s audio, and possibly video, after that user hangs up. Tracked as CVE-2026-113380, the vulnerability affects RingRTC versions before 2.72.0. […]

Signal flaw could expose audio and video even after users hang up Read More »

Africa cybercrime crackdown nets 1,462 arrests and over $105 million

Africa, arrest, cybercrime, Fortinet, Group-IB, Interpol, Kaspersky, law enforcement, Meta, News, Team Cymru /

Africa cybercrime crackdown nets 1,462 arrests and over $105 million 2026-10-22 at 11:17 By Anamarija Pogorelec Police in 21 countries arrested 1,462 suspects and took down 10,909 malicious networks in Operation Serengeti III, an INTERPOL-coordinated cybercrime sweep across Africa that ran from June 29 to August 31, 2026. Investigators recovered more than $105 million in […]

Africa cybercrime crackdown nets 1,462 arrests and over $105 million Read More »

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Featured, Oracle, Oracle CPU, patches, Vulnerabilities, vulnerability /

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU 2026-10-22 at 10:38 By Eduard Kovacs Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU Read More »

AI-found bugs are expected to rise, and OpenAI has a five-stage response plan

cybersecurity, News, OpenAI, vulnerability disclosure /

AI-found bugs are expected to rise, and OpenAI has a five-stage response plan 2026-10-22 at 10:35 By Mirko Zorz OpenAI has proposed a five-stage process for handling critical vulnerabilities in widely used software. The process grew out of a two-month response to flaws in PHP, the open-source language that runs websites and web applications. Calif […]

AI-found bugs are expected to rise, and OpenAI has a five-stage response plan Read More »

Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook

Data Protection, fine, Meta, New Mexico, Privacy, Privacy & Compliance /

Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook 2026-10-22 at 10:26 By Associated Press The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019. The post Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy […]

Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook Read More »

Delinea gives AI assistants read-only access to governance data

Delinea, Industry news /

Delinea gives AI assistants read-only access to governance data 2026-10-22 at 10:17 By Industry News Delinea has announced Delinea Fastpath MCP Server, a new capability that connects access governance data to the AI assistants teams already use. Using the Model Context Protocol (MCP), finance, IT, audit, and compliance teams can ask natural-language questions and get […]

Delinea gives AI assistants read-only access to governance data Read More »

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question

boardroom, CISO, Cloud, cloud computing, cybersecurity, data, data security, Don't miss, EU, Europe, Features, Government, Hot stuff, Microsoft, News, opinion, regulation, strategy, tips /

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question 2026-10-22 at 10:02 By Mirko Zorz In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains why organizations underestimate speed, the time it takes to detect and stop […]

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question Read More »

Scroll to Top