PHP security crisis live — all the latest news as issues affect websites across the world
PHP security crisis live — all the latest news as issues affect websites across the world

PHP issues are affecting websites across the globe – we’re covering the latest news and updates as it happens.

The dark side of ‘free’ mobile games — how developers reverse-engineer your patience to milk ad revenue
The dark side of ‘free’ mobile games — how developers reverse-engineer your patience to milk ad revenue

Block Blast reportedly earned $127 million from ads, but an investigation uncovered code allegedly manipulating difficulty, player profiling, and incentives to watch ads.

A nightmare scenario for supermarkets: Hidden daily passwords and command injection flaws leave thousands of Danfoss supermarket systems open to remote takeover
A nightmare scenario for supermarkets: Hidden daily passwords and command injection flaws leave thousands of Danfoss supermarket systems open to remote takeover

Claroty researchers found 2,765 publicly accessible Danfoss refrigeration systems and three vulnerabilities involving hidden passwords, command injection, and web server manipulation.

Russian bot activity plunged 84% after Ukraine hit Yandex data centers, but the bots were back at full strength within two days

The 84% bot collapse after Ukraine’s Yandex strikes was real, lasted about a day, and Cloudflare watched the automation move to rival clouds.

FBI warns of torrent of scams and deepfakes ahead of US midterm elections

AI deepfakes and financial fraud campaigns are already showing up ahead of the US midterm elections in November.

Fake VPN download site steals administrator credentials to give attackers direct access to corporate networks — but delivers official signed software so victims never suspect a thing
Fake VPN download site steals administrator credentials to give attackers direct access to corporate networks — but delivers official signed software so victims never suspect a thing

A fake WatchGuard VPN download website stole administrator credentials before delivering the genuine signed installer, potentially exposing corporate networks without deploying malware.

Chinese-made cars rented by Norwegian military automatically recorded and stored video footage during military exercises
Chinese-made cars rented by Norwegian military automatically recorded and stored video footage during military exercises

Norwegian soldiers discovered rental cars had stored military footage and access codes, raising security concerns despite no evidence of deliberate espionage.