21 Oct

PHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatched

security Websites down as precaution as exploits have already been published  PHP developers have released emergency updates for two critical vulnerabilities after cybersecurity authorities warned

Author rabih
21 Oct

AI has ‘potential’ to turn script kiddies into sophisticated infrastructure attackers

When it comes to cyberattacks that shut down power grids, drinking-water systems, and other critical infrastructure, AI doesn’t – yet – turn script kiddies into sophisticated, nation-state

Author rabih
21 Oct

Nvidia picks OpenShell to tame AI gents

ai and ml Give your agents freedom to do useful work by locking them down Nvidia has proposed a new way to keep corporate AI

Author rabih
21 Oct

EU wants Booking.com to check out of its scam problem

security Commission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses ‘absolutely substandard’ The European Commission has opened an

Author rabih
20 Oct

Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’

security Massive clean-up job under way because this mess makes it possible to impersonate any website or service Tragically simple private keys used by a

Author rabih
20 Oct

Auto tech startup claims it traced hack attempt back to rival’s IP address

cyber-crime IQ.Lvbs implies that rival Comma.ai isn’t playing fair An automotive tech startup claims that its IT systems were attacked by individuals trying to steal

Author rabih
20 Oct

Palo Alto’s firewall OS has been under attack from multiple ransomware groups since June

Multiple ransomware groups, including Qilin and Inc, have been exploiting a high-severity authentication bypass bug in Palo Alto Networks’ PAN-OS, with Unit 42 investigating attacks

Author rabih
20 Oct

Swamped curl maintainers take low-level flaws public to survive vulnerability ‘avalanche’

An “avalanche of vulnerability reports” is forcing curl to move lower-severity cases into public view, reserving private handling for high and critical flaws. From October

Author rabih
20 Oct

‘Password1’ and a forgotten test account land Welsh outfits in hot water

A test account protected by “Password1” helped an intruder steal personal data relating to 3,300 people, mostly children, in a ransomware attack that has drawn

Author rabih
20 Oct

Bullhorn sees red after cyberattack knocks recruitment platform offline

Bullhorn is the latest tech giant finding itself on the wrong end of a cyberattack, forcing the recruitment software provider to shut down its platform

Author rabih
20 Oct

Whitehall shuts the front door on digital ID but leaves the back open

Britain’s national digital ID scheme may be dead, but Whitehall appears to have forgotten to tell the infrastructure. Despite the government scrapping its controversial plans,

Author rabih
20 Oct

UK finance watchdog wants firms to report AI failures and close calls

The UK’s financial regulator says firms’ incident reporting must cover significant AI failures and near-misses as increasingly autonomous systems raise new risks. Speaking at Bloomberg’s

Author rabih
20 Oct

Is the ad a scam? How to tell before you click

Social Media You can trust a social media platform and still get scammed by an ad running on it Phil Muncaster 20 Oct 2026  • 

Author rabih
20 Oct

Why cyber resilience is now a boardroom priority for UK public services

The UK public sector has reached a cyber resilience inflection point. A new Prime Minister has taken office, and significant machinery-of-government changes have already been

Author rabih
20 Oct

ICANN testing tech to let law enforcement access non-public WHOIS info

ICANN has started testing authentication schemes that will allow law enforcement agencies to make urgent requests for non-public WHOIS information – when needed to address

Author rabih
20 Oct

DeepSeek deep-sixed at all US federal civilian agencies

The US Department of Homeland Security on Monday issued an order directing federal civilian agencies not to use technology products from Chinese AI lab DeepSeek,

Author rabih
19 Oct

Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline

Dutch grocery giant Ahold Delhaize, which operates US supermarket chains Food Lion, Giant Food, and Stop & Shop, said it proactively took IT systems offline

Author rabih
19 Oct

Security patches need patches now that attackers have AI

Updating your software only gets you so far. A scary scenario – security fixes themselves being bypassed – is becoming more common, according to AI

Author rabih
Load moreLoadingAll items loaded