Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across the…
Последние новости
⚑ Сообщить о проблемеTech news from the best sources
Все темы
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
AI found flaws in the code behind 70% of the web. The fix took two months.
PHP powers roughly 70% of the world’s websites, according to Wiz Research, so a flaw in its core engine affects The post AI found flaws in the…
Amodei says Anthropic’s safety delay may have cost it an AI lead
Anthropic first released Mythos-class models in February 2026, but CEO Dario Amodei said it delayed broader access until June to The post Amodei say…
PHP: The three letters that shut down sites all over the internet today
Two bugs found with AI are behind major issues today for 4chan, DeviantArt, Wikipedia, and the blog where the bar around the corner posts pictures o…
The internet is having a very bad cybersecurity day
From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.
PHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.
eMudhra Intermediate CA Compromise
Private keys for eight eMudhra intermediate CA certificates have been compromised, allowing attackers to forge certificates for any site. The keys w…
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly pa…
AI Guardrails Aren’t Stopping Criminal Hackers
Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their…
From feral to fiduciary: making AI agents serve your interests
Tech leaders face a dilemma as they prepare to put AI agents into production. They want the higher productivity and The post From feral to fiduciary…
OpenAI says an AI agent lied about disabling its safety monitoring system
OpenAI disclosed a pair of safety incidents that involved AI agents weakening their safety monitoring systems during internal coding tasks. In one i…
Netflix Bridges AWS IAM and Internal Identity with Workload Attestation
Netflix has developed a workload attestation mechanism for Apache Spark jobs running on Amazon EMR. The design combines AWS IAM identity with signed…
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assis…
A critical PHP vulnerability may take websites down today
Security patches for the PHP programming language, widely used to build websites and web apps, are expected to roll out today, with the goal of fixi…
The State of AI Security: Threats, Tools, and Skills Gaps
Artificial intelligence has changed cybersecurity permanently. While OpenAI’s inadvertent attack on Hugging Face brought AI-generated attacks to eve…
She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family
To escape the chaos of her Russian childhood, Lili Infante became an American law enforcement prodigy. She pioneered the DEA’s investigations of the…
PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
Meta pauses Muse sharing after researchers find AI chats on the web
Meta says it paused a Muse feature that lets you share conversations with the AI assistant after researchers found the URLs publicly available on th…
Chrome will now show a warning before you visit ‘suspicious’ sites
Google is launching a new browser safety feature for Chrome that aims to keep you better informed about how malicious a website might be before you…
Meta Muse exposes users' personal and business secrets when they share conversations
A single query is all that's required to find thousands of conversations listed by title.
Blackwall quadruples valuation to $2.2B as websites wrangle an increasingly crowded internet
Blackwall has raised $100M at a $2.2B valuation to continue building security and filtering tools that help websites grapple with growing bot and AI…
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s release to a…
PSA: Patch your Plex media server before someone hacks it
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
One sentence changed Claude Code’s overreach rate from 0% to 17.1%
Anthropic is reportedly developing a model that can infer what users want from incomplete instructions. According to The Information, a The post One…
WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot
Around 80 pages on WhatsApp’s website exposed instructions that were designed for its chatbot, including “WHAT NOT TO SAY.” Meta says a bug caused t…
A hacker broke into John Deere and SharkNinja with an army of AI agents
A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from the AI security…
The distroless security gap: Why bottom-up containers are the next evolution in OCI images
Ever tried to shrink your container images to reduce their attack surface? If you have, you’ve likely discovered a frustrating The post The di…
AWS Will Run Its European Sovereign Cloud Without the Global Backbone for Several Hours
On October 24, AWS will operate its European Sovereign Cloud without a connection to the AWS Global Network backbone, with a team of EU residents an…
Encryption Is Getting Squeezed From All Sides
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.