php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Disinformation as a cybersecurity...

The emergence of disinformation has put doubt on many elements of society, and it is also posing a huge danger to cybersecurity. Disinformation is the purposeful spread of false information,...

Joint cybersecurity advisory warns of...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the FBI, the Multi-State Information Sharing and Analysis Center (MS-ISAC), and cybersecurity authorities from Australia, Canada, the United Kingdom, Germany, France, and...

Malware created with ChatGPT evades...

The use of ChatGPT has resulted in the creation of malicious software capable of evading detection and reaction from traditional antivirus and endpoint detection and response (EDR) systems. Through prompts,...

Cyberattackers target experts in North...

According to SentinelLabs, a North Korean APT organization known as Kimsuky is conducting a social engineering effort against specialists in North Korean issues. The attack started with an email from...

Biden’s cybersecurity strategy to address...

Kemba Walden, the acting national cyber director at the White House, has revealed that the Biden administration’s National Cybersecurity Strategy aims to address threats from AI in cybersecurity and promote...

MOVEit Transfer under attack by...

Threat actors have been discovered by security researchers at Rapid7 to be exploiting a zero-day vulnerability in Progress Software’s MOVEit Transfer product, widely used by enterprises for secure file transfers....

New RomCom malware uncovered by...

Trend Micro has discovered a new campaign involving a malware called RomCom which tricks users into downloading harmful software by impersonating well-known or fictional websites. Trend Micro researchers have been...

Kaspersky warns of “Operation Triangulation”...

Kaspersky has warned about an ongoing attack called Operation Triangulation on Apple’s iMessage. The attacks, which started in 2019, are utilizing a zero-click, zero-day vulnerability which enables code execution and...

Western Digital releases update for...

Western Digital, SanDisk’s parent firm, has discreetly revealed that their wildly popular SanDisk Extreme Pro portable solid-state drives (SSDs) were faulty, and has released a firmware update. The acknowledgement comes...

Advantages and concerns of ChatGPT...

The influence of ChatGPT on cybersecurity, the threat landscape, and society in general has provoked much debate and discussion. There are concerns about the hazards of artificial intelligence and there...

Quantum computing threat to financial...

A detailed paper provided by Hudson Institute experts sheds light on the major consequences of quantum computing on the global financial system. The vulnerability of the Federal Reserve’s bank-to-bank transaction...