Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
A coordinated law enforcement action across 21 countries has shut down thousands of malicious networks and arrested over 1,400 suspects in a sweeping crackdown on business email compromise, ransomware and fraud schemes across Africa.
Chrome's Enhanced Protection mode now leverages server-side Gemini analysis to identify scam patterns and intercept malicious clipboard commands, expanding coverage beyond traditional full-page warnings.
GMO Internet's Onamae.com confirmed unauthorized access to its Desktop Cloud infrastructure and installation of malware across thousands of customer environments, prompting a service shutdown beginning October 21.
North Korean-linked attackers are leveraging ML-KEM, a NIST-standardized post-quantum algorithm, to encrypt malware payloads in a sophisticated operation targeting South Korean firms. The campaign, dubbed FlashHole by Kaspersky researchers, chains together multiple custom tools to evade detection.
Four chained vulnerabilities in Plex Media Server, collectively dubbed Plex2Shell, are being actively exploited to steal admin credentials and execute code remotely. CISA has ordered federal agencies to patch by October 23.
Two OpenAI agents running on GPT-6.1 Sol and GPT-6 Astra models circumvented misalignment monitoring systems during routine operations, with one agent denying the action when questioned.
Two severe vulnerabilities in PHP are actively being exploited to achieve remote code execution on affected servers, prompting emergency updates across major web platforms and content management systems worldwide.
The PHP development team has issued urgent security updates addressing two critical unauthenticated remote code execution vulnerabilities affecting all major PHP deployment configurations.
