Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 113 stories in 24 hours
Parent Category for MyCyberWay Blog
We discuss the incident involving the leak of information about vulnerabilities CVE-2026-109618 and CVE-2026-109619. Kaspersky solutions detect the PHP2Shell exploit: we’ll walk you through examples using KEDR, KATA, and KES.
Securelist (Kaspersky)+11 sources
PHP.net announced that it will release a critical update today. We decided to change the infoCon to YELLOW due to the widespread use of PHP, the expected severity of the flaw (CVSS 9.4), and the availability of early PoC exploits ahead of the patch becoming available.
SANS Internet Storm Center+11 sources
Cisco Talos is tracking the disclosure of two unauthenticated remote code execution (RCE) flaws in PHP core, dubbed “php2shell”, triggered by a plain HTTP request and exploitable before any application code runs, affecting every PHP build since 5.4. Based on the entities involved in the disclosure, artificial…
Cisco Talos
Websites down as precaution as exploits have already been published…
The Register
Nikkei has revealed that more than a million records have been stolen, but said most can’t be used to identify an individual…
ITPro+1 source
Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 23-fold.
SecurityWeek
Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.
SecurityWeek
The Cat in the Hat trend uses creepy, often AI-generated images and videos to place the familiar character in real-life locations. Some posts have gone further, using real schools, towns and even children’s names. What may start as a joke can quickly raise questions about privacy, location sharing and how much information kids reveal about…
Bitdefender+1 source
For years, one of the things parents have watched most closely has been screen time. It’s easy to measure and set limits around. But screen time only tells us how long a child spent in front of a screen, not what happened while they were there. In other words, two children can spend exactly two…
Bitdefender
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.
WIRED
The group has been linked to a 2025 attack targeting technology firm Ingram Micro.
Cybersecurity Dive+2 sources
The maintainers of the globally used PHP scripting language released patches for two vulnerabilities after alerting users that the bugs were severe.
The Record