PHP Critical Bugs Patched After Early Exploitation
According to Decrypt, two critical bugs in PHP—the server-side scripting language used by a large portion of websites—were discovered and…
Security
Cybersecurity, vulnerabilities, threats, and defense
PHP Fix Deployed After Mass Attack Attempts
According to Decrypt, PHP shipped its fix following a period in which attackers launched millions of attempts to exploit a…
Hacker transfers stolen crypto to Tornado Cash after exploiting Cysic bridge; entity offers bounty
According to Cointelegraph, a hacker exploited Cysic’s bridge protocol and minted 10 million tokens on the BNB Smart Chain. Following…
Cloudflare CEO Reports Thousands of Exploit Attempts Before Public Disclosure of PHP Vulnerability
According to Cointelegraph, Cloudflare CEO Matthew Prince said the company observed thousands of exploit attempts targeting a PHP vulnerability even…
PHP Foundation acknowledges structural failure behind delay to critical security fix
According to Cointelegraph, the PHP Foundation admitted that a structural failure within its processes delayed a critical security fix. The…
PHP2Shell: two critical PHP RCEs (CVE-2026-109618 / CVE-2026-109619) — status, impact and what to do
PHP has released 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Confirmed: CVE-2026-109618 (RCE via OOM corruption) and CVE-2026-109619 (RCE via stale global state), both CVSS 9.2, affected ranges 8.2-8.5 only, complete RCE validated against mod_php. No complete mitigations – updating is the only safe choice.
Tech giants act to block eight eMudhra digital certificates vulnerable to forgery
According to Cointelegraph, tech companies are moving quickly to block eight eMudhra-issued digital certificates that contain a private key generation…
Drift Exploiter Funneled $61M ETH into Tornado Cash, Holds $194M
According to Cointelegraph, a hacker who exploited the April 1 vulnerability in the Drift protocol transferred approximately $61 million worth…
US bars DeepSeek use in civilian government IT systems
According to Cointelegraph, the United States has extended restrictions barring the use of DeepSeek within civilian agency IT systems. This…
MapQuest App Adds Optional Layer Showing Known License Plate Reader Locations
According to Decrypt, MapQuest’s mobile application now includes an optional map layer that displays the locations of known license plate…