Cybersecurity news from across the internet
Cybersecurity news from across the internet

After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016. The post Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016 appeared firs…
Overview Two memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. An unauthenticated remote attacker with network access to PHP web services can exploit these v…




EMudhra Intermediate CA Certificates Compromised
The Current Landscape of OAuth Attacks
ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability
ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability
VU#763488: Memory corruption vulnerabilities in PHP
CISA Adds 20 Known Exploited Vulnerabilities to Catalog
ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)
Multiple Vulnerabilities in PHP Could Allow for Remote Code Execution
Facebook’s misleading privacy claims land Meta a $25 billion penalty
Job Seekers Who Use AI for Applications Need to be on the Lookout for Scams
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
Warning: Calendly Phishing Pages Are Targeting Job Seekers