Security Incidents GMO Internet Puts $1 Million on the Table to Identify Attackers Behind FX Trading Cloud Breach October 28, 2026 Japan's GMO Internet Group is offering a seven-figure reward for information leading to the arrest… Read More
Vulnerabilities EPICS Base Vulnerabilities Expose Critical Manufacturing Infrastructure to Remote Code Execution October 27, 2026 Four newly disclosed flaws in EPICS Base versions up to 7.0.10 carry CVSS scores as… Read More
Security Incidents University of New Mexico Health Sciences Centre Hit by Cyberattack, Classes Cancelled for Second Day October 27, 2026 A cybersecurity incident at UNM's Health Sciences Centre forced ambulance diversions, clinic cancellations, and two… Read More
AI & Security Prompt Injection Attack Exploits AI Coding Assistants via Local Instruction Files October 27, 2026 Attackers are abusing the trust AI agents place in markdown and local configuration files to… Read More
Policy & Advisories CISA Confirms PHP2Shell Vulnerabilities Are Being Actively Exploited October 27, 2026 CISA has added PHP2Shell flaws to its Known Exploited Vulnerabilities catalogue and directed federal agencies… Read More
Vulnerabilities Brotli Library Vulnerability Draws Concern but No Confirmed Exploitation October 27, 2026 CVE-2026-111497 has a broad attack surface across cloud environments, but researchers urge organisations to assess… Read More
Policy & Advisories Overdue FISA Court Opinion Puts Section 702 Reauthorisation in Doubt October 26, 2026 The Trump administration has missed statutory deadlines to declassify a Foreign Intelligence Surveillance Court ruling… Read More
Security Incidents PHP2Shell: A Decade of Vulnerable Code Puts 70 Per Cent of Websites at Risk October 26, 2026 Two memory-safety flaws in PHP core—affecting every version back to 5.4—have triggered emergency patches, exploitation… Read More
Vulnerabilities PHP2Shell RCE Vulnerabilities Actively Exploited in the Wild October 26, 2026 Two critical remote code execution flaws tracked as PHP2Shell are being exploited, prompting mitigation guidance… Read More
AI & Security UK commits £130 million to AI-powered cyber defence, including autonomous vulnerability hunting October 26, 2026 Britain's latest budget allocates significant funding for agentic AI security tools and a new national… Read More