Browsing: flaws

The homepage of the PHP.net website is seen on October 22, 2026 in Singapore. Cyber-security flaws were recently identified in the popular PHP programming language, which is used on a vast number of websites across the world, including those of major companies and national governments. The PHP Foundation released two patches designed to fix the…

One day after governments around the world warned thatnewly publicized software vulnerabilities were so severe that websites should consider going offline until they could fix them, experts and insiders said there are few, if any, reports of widespread damage.

A pair of Marines filed a class-action lawsuit Tuesday against the Pentagon over a data breach at the Defense Manpower Data Center, or DMDC, arguing it allowed scammers to obtain and use their personally identifiable information, or PII.

Two critical flaws in PHP, one of the most widely used technologies for building websites, can let an attacker take over a web server without a password or any other prior access. The attacker only has to send specially crafted web requests to the server. The PHP project released fixes on October 21, 2026, but…

Critical PHP2Shell vulnerabilities forced websites and public services offline as organisations raced to patch systems and protect users. Dubbed the “PHPocalypse”, the incident shows how runtime security flaws can disrupt customer journeys across the Internet.

Hundreds of French supermarkets faced a sophisticated cyberattack, allowing hackers to manipulate industrial controls.

Salesforce has seen its share price fall back in recent months, and that pullback has sharpened the question of whether the current US$225.31 level is still supported by what the company earns. With mixed headlines around security, product integrations and reliability, the stock now asks investors to judge how much of its earnings story is…

Salesforce has quietly patched a set of AI agent flaws that let attackers pull customer data out of live CRM systems without a single click from a victim. Zenity Labs, an AI agent security research firm, disclosed the vulnerabilities on September 24, 2026, under the name “SalesBleed,” according to Infosecurity Magazine. The flaws lived inside…

An attacker used hundreds of AI agents to exploit recently disclosed PaperCut MF and NG vulnerabilities, compromising hundreds of organizations globally and rapidly gaining domain administrator access in at least 12 cases, GreyNoise researchers reported Wednesday.The campaign targets the vulnerabilities tracked as CVE-2026-81578 and CVE-2026-82078, which can be chained together to enable authentication bypass and…

A report showed that Claude could help hackers develop attack strategies targeting PLCs used by water utilities and other industries.