PHP Warns of Two Critical RCE Flaws as Embargoed Details Leak
October 21, 2026
PHP pre-announced emergency patches for two CVSS 9.2 remote code execution flaws after embargoed details leaked, raising fears of mass
News
PHP Warns of Two Critical RCE Flaws as Embargoed Details Leak
PHP pre-announced emergency patches for two CVSS 9.2 remote code execution flaws after embargoed details leaked, raising fears of mass exploitation soon.
DHS Orders Federal Civilian Agencies to Remove DeepSeek Products
A DHS order under the FASCSA directs US federal civilian agencies to remove DeepSeek products and bars new purchases, citing data access risks tied to ...
Feds Suspect Ransom Negotiator Helped Run ShinyHunters Leak Site
US investigators reportedly suspect executives at two ransomware negotiation firms had close ties to ShinyHunters, and one helped run its extortion site.
23andMe Successor Settles With California for $6M Over Breach
Chrome Holding Company, formerly 23andMe, will pay California $6 million over a 2023 breach that exposed data on nearly 7 million people, pending approval.
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
The UK ICO reprimanded Data Cymru and Ogi Networks after a test account with the password Password1 let ransomware hit data on 3,300 people, mostly ...
Mozilla, Google, Apple Block Eight Weak eMudhra CA Keys
Eight eMudhra CA intermediate keys were so weak they could be computed, so Mozilla, Google, Apple and Go blocked them and eMudhra revoked the certificates.
Hacker Claims NBCUniversal Production and Tax-Credit Data Theft
An unverified claim on a hacker marketplace says NBCUniversal production plans, budgets and tax-credit applications were stolen; the company has not confirmed.
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
An attacker used a hijacked contributor GitHub account to swap secret-stealing builds into five OVHcloud CLI releases for about 94 minutes before detection.
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024, many in critical infrastructure.
Public Exploit Released for Critical FortiSIEM Flaw CVE-2026-106173
Horizon3.ai published a proof-of-concept for CVE-2026-106173, a CVSS 9.4 unauthenticated path traversal flaw in Fortinet FortiSIEM that leads to code execution.
DHS Orders Federal Civilian Agencies to Remove DeepSeek Products
October 21, 2026
A DHS order under the FASCSA directs US federal civilian agencies to remove DeepSeek products and bars new purchases, citing
Feds Suspect Ransom Negotiator Helped Run ShinyHunters Leak Site
October 21, 2026
US investigators reportedly suspect executives at two ransomware negotiation firms had close ties to ShinyHunters, and one helped run its
23andMe Successor Settles With California for $6M Over Breach
October 21, 2026
Chrome Holding Company, formerly 23andMe, will pay California $6 million over a 2023 breach that exposed data on nearly 7
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
October 21, 2026
The UK ICO reprimanded Data Cymru and Ogi Networks after a test account with the password Password1 let ransomware hit
Mozilla, Google, Apple Block Eight Weak eMudhra CA Keys
October 21, 2026
Eight eMudhra CA intermediate keys were so weak they could be computed, so Mozilla, Google, Apple and Go blocked them
Hacker Claims NBCUniversal Production and Tax-Credit Data Theft
October 21, 2026
An unverified claim on a hacker marketplace says NBCUniversal production plans, budgets and tax-credit applications were stolen; the company has
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
October 21, 2026
An attacker used a hijacked contributor GitHub account to swap secret-stealing builds into five OVHcloud CLI releases for about 94
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
October 21, 2026
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024,
Public Exploit Released for Critical FortiSIEM Flaw CVE-2026-106173
October 21, 2026
Horizon3.ai published a proof-of-concept for CVE-2026-106173, a CVSS 9.4 unauthenticated path traversal flaw in Fortinet FortiSIEM that leads to code
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.