Cybersecurity - Page 9
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Stories from Cybersecurity come first, newest first, then stories from connected topics (Cybersecurity, vulnerabilities, phishing, AI security, Japan), each labelled with where it comes from. This view is not indexed by search engines.
Latest
PHP2Shell: Honeypots Log 35 Confirmed RCEs, but No Victim Breach Yet
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that can allow unauthenticated remote code execution. PHP says to update immediately.
Stolen UpdraftCentral Keys Used to Backdoor WordPress Sites, Researchers Say
A breach at TeamUpdraft exposed UpdraftCentral keys, and researchers say attackers used them to plant backdoor plugins. Update and delete old keys now.
23andMe’s Successor Agrees to Pay California $6m Over the 2023 Data Breach
Chrome Holding, formerly 23andMe, will pay California $6.01m and drop out of consumer business for five years, if a bankruptcy judge approves the deal.
SafePay Ransomware Has Hit at Least 600 Victims, FBI, CISA and UK Police Warn
A joint FBI, CISA and UK National Crime Agency advisory says SafePay has hit at least 600 victims, often through old Cisco, Veeam and SonicWall flaws.
Ransomware Gangs Exploit Months-Old Palo Alto GlobalProtect Flaw, Unit 42 Says
Qilin and Inc ransomware crews are exploiting CVE-2026-0257, a PAN-OS GlobalProtect bypass patched in May, Unit 42 says. Unpatched firewalls are at risk.
Nigerian Man Gets Eight Years Over Spearphishing Hacks of US Tax Preparers
Chukwuemeka Victor Amachukwu, 40, has been jailed for eight years in New York over phishing hacks of US tax firms used to file fake tax returns.
Chrome’s Enhanced Protection Adds ‘Suspicious Site’ Warnings and ClickFix Checks
Google says Chrome's Enhanced Protection now flags suspicious sites, checks pages with a server-side Gemini model and spots copied ClickFix commands.
curl Will Handle Low and Medium Vulnerability Reports in Public From 26 October
From 26 October, curl wants LOW and MEDIUM vulnerability reports filed publicly on GitHub, as maintainers face an avalanche of reports, many found with AI.
Keys to Eight eMudhra Intermediate Certificates Compromised, Mozilla Says
Mozilla says keys for eight eMudhra intermediate certificates were compromised. eMudhra blames a key-ceremony flaw that produced weak keys.
Citizens Bank Says a Breach Exposed Customers’ Social Security Numbers
Citizens Bank says an unauthorised third party accessed customers' names, Social Security numbers and birth dates. It has not said how many were hit.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.