Chronological technology intelligence ledger across all editorial desks
Oct 21, 2026Both problems could result in large-scale attacks and require massive cleanup. The web is a bit of a hot mess today following the discovery of two severe vulnerabilities, according to security releases seen by Ars Technica. The first involves TLS ce...
Oct 21, 2026Batten down the virtual hatches. The PHP security team has given advanced notice of an upcoming fix for two critical security vulnerabilities, both rated at 9.2 out of 10 on the CVE severity scale. Info about the flaws seems to have leaked ahead of...
Oct 21, 2026Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025. "The most distinctive technical m...
Oct 21, 2026Google on Tuesday said it's rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social engineering technique in which bad actors trick users into c...
Oct 21, 2026Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements. Mouse Button Lock, one of the new mouse tools, makes it easier to select items on screen by locking a mouse button while ...
Oct 21, 2026You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that suggested it now says. PHP will release the fix at 14:00 ...
Oct 21, 2026The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024. In a joint report with the FBI, the U.S. Secret Service (USSS), Germany's ...
Oct 21, 2026Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates. Always On VPN replaced the legacy DirectAccess technology and supports domain-joined, non-domain-joined, a...
Oct 21, 2026The private keys associated with eight intermediate certificates issued by Indian certificate authority (CA) eMudhra have been compromised, and root programs and trust stores have started blocking them. The certificates were issued in April 2025, an...
Oct 21, 2026Google on Tuesday announced the promotion of Chrome 156 to the stable channel with patches for 353 vulnerabilities. Most of the resolved security defects were memory safety flaws, including 163 memory corruption bugs, 125 use-after-free issues, and ...
Oct 21, 2026The attack uses malicious Google search results related to Amazon and leverages the 'finger' utility to launch a CAPTCHA that installs malware, including the Lumma stealer. A new ClickFix attack is leveraging a legacy Window utility to run malicious...
Oct 21, 2026It's morning. The money mule — or lavador, as the cartels call their pet launderers — steers into a sweltering strip mall parking lot somewhere in Miami. He pulls into an open space, looks around, opens his trunk. Before long the adjacent space i...