> TODAY'S SUMMARY (125 articles)
Today's cybersecurity news highlights several critical threats and vulnerabilities. The PHP Foundation has issued emergency patches for two severe remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively termed PHP2Shell, which are being actively exploited; website owners are urged to update immediately. Additionally, a new phishing-as-a-service platform, Athena StealthRoute, utilizes AI to generate deceptive lures, indicating a growing trend in AI-assisted cybercrime. Meanwhile, ransomware attacks are surging, with rival gangs evolving their tactics to exploit various vulnerabilities. The U.S. government has mandated the removal of DeepSeek AI products from federal systems due to security risks. Overall, the landscape is marked by rapid exploitation of vulnerabilities and the increasing sophistication of cyber threats.
|
// AI-powered summary generated at 16:01
A computer security consultancy has set up a social network for hackers, called House of Hackers.
The FBI have revealed that the US government has purchased counterfeit networking equipment that could jeopardize the security of its military and other government systems.
Two influential US senators are demanding more information about the so-far, ultra-secret Comprehensive National Cybersecurity Initiative (CNCI), which is being put in place to protect the nation’s infrastructure against cyber terrorists and criminals.
The Jericho Forum has unveiled a new security framework for interactive business Internet users.
When it comes to defining what a Chief Security Officer does in an enterprise think less of a corporate cop and more of a business enabler. That was the message at the RSA Conference from Dave Hansen, former CIO at CA and now a senior vice president and general manager of the company’s Security Mana...
A security lapse on Facebook has made large libraries of private photographs, including one of Paris Hilton, available for all users to access. Exploiting a recent upgrade to the networking site’s privacy settings, a Canadian hacker was able to view pictures that were intended as private.
US lawmakers are asking why a stolen laptop, which had medical test results for 2,500 patients in a National Institute of Health study, was not encrypted.
The US National Security Agency (NSA) and Sun Microsystems have agreed to jointly work within the OpenSolaris community to develop new security mechanisms for the operating system.
Fourteen airports in the US, Canada and Asia, are using open or poorly secured wireless networks, according to a study by Gartner Mobile and wireless provider AirTight Networks.
Despite some progress, many US federal agencies continue to experience significant information security control deficiencies, according to a new report.
Police are investigating a possible Home Office security breach after the discovery of an encrypted laptop containing a scrambled disc with the words ‘Home Office, highly confidential’ written on it. The laptop was found in a computer shop near Bolton, after a customer had taken it in for repair. Th...
A US Department of Homeland Security-funded research program will help deliver Endeavor Security’s new method of targeting botnet and malware attacks before hosts are infected.
Identity theft and fraud in the US fell by 12% in 2007 as it fraudsters apparently relied on offline channels for their attacks.
With a key deadline rapidly approaching, will there be rapprochement between the Federal Government and a group of individual states over the implementation of the Real ID Act?