Chronological technology intelligence ledger across all editorial desks
Oct 21, 2026The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that's collectively called Plex2Sh...
Oct 21, 2026State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India's largest, said in ...
Oct 21, 2026This story is developing and was written before PHP's scheduled 14:00 UTC release on October 21. Once the release is out, the affected and fixed versions below are confirmed by the official advisory. PHP will ship an out-of-cycle security release at...
Oct 21, 2026A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report published by Russian cybersecurity firm Solar, the activity has been attributed to a threat cluster dubbed Parti...
Oct 21, 2026Accenture, Dragos and the SANS Institute on Tuesday announced the Community Cyber Resilience Foundation, which aims to help under-resourced US water, electric and natural gas utilities protect their operational technology (OT) environments. They are...
Oct 21, 2026French cloud computing and web hosting company OVHcloud says a hacker used the GitHub account of one of its developers to plant a secret-stealing binary in its official command-line interface (CLI) tool. The supply chain incident occurred on October...
Oct 21, 2026Details on two critical-severity PHP vulnerabilities named PHP2Shell have been leaked online ahead of scheduled coordinated disclosure and official patches. On Tuesday, PHP warned that patches for the critical issues, both with a CVSS score of 9.2, ...
Oct 21, 2026Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that powers websites and Web applications everywhere. PHP main...
Oct 21, 2026Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websit...
Oct 21, 2026A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. TeamUpdraft detected unauthorized acce...
Oct 21, 2026Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised. Google, Mozilla, Apple, and the Go programming language project blocked certifi...
Oct 21, 2026Dutch-Belgian grocery giant Ahold Delhaize has restored some of the services impacted by last week's cyberattack and expects more to come back online within days. On October 12, the company took its systems offline in response to "a security issue" ...