Chronological technology intelligence ledger across all editorial desks
Oct 26, 2026A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. The security issue is tracked as CVE-2026-111497 and is also known as "Broccoli2Shell" and "N...
Oct 26, 2026PwC on Monday said it was investigating claims that hackers had breached a third-party vendor site the company uses to house employee learning records. The company disclosed the breach amid claims from Everest ransomware that it had stolen 590 gigab...
Oct 26, 2026The Cybersecurity and Infrastructure Security Agency on Monday laid out an ambitious vision for protecting U.S. government networks and critical infrastructure systems over the next four years. The "CISA 2030: Defend, Harden, Prevail" strategy chart...
Oct 26, 2026The internet's mad scramble on Wednesday to patch a pair of critical vulnerabilities in PHP, a widely used web scripting language, was already too late to stop every attack, newly released details reveal. Wednesday's release of fixes for two critica...
Oct 26, 2026Welcome to Kernel Panic, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox each week, sign up here. As security teams and web admins scrambled ...
Oct 26, 2026Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations...
Oct 26, 2026A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the...
Oct 26, 2026Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response (NDR) platform, connects individual alerts into one timeline, and it...
Oct 26, 2026Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first need a vulne...
Oct 26, 2026Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. The malicious activity was caught by Adel Karimi, detection and response lead at Perplexity, who...
Oct 26, 2026Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. This Linux distribution is available as an installable OS or as a live environ...
Oct 26, 2026A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole nearly $37 million from 174 victims in the United States. In these fraud schemes (a...