Security breach at AI aggregator exposes over 18 million files, including some very embarrassing chat records

An AI aggregator kept an open database unprotected on the internet containing personally identifiable information and some embarassing chat logs.

No, the internet isn’t dying due to ‘one of the most significant vulnerabilities of 2026’ – but this is what you need to know
No, the internet isn’t dying due to ‘one of the most significant vulnerabilities of 2026’ – but this is what you need to know

Everything you need to know about PHP2Shell in terms of what it is, and what this security flaw means for the average person browsing the web.

Which big websites have been hit by the PHP crisis? Here’s the list so far
Which big websites have been hit by the PHP crisis? Here’s the list so far

Major websites are going offline as they attempt to patch a huge PHP vulnerability. Here’s what we know.

PHP security crisis live — all the latest news as issues affect websites across the world
PHP security crisis live — all the latest news as issues affect websites across the world

PHP issues are affecting websites across the globe – we’re covering the latest news and updates as it happens.

PHP releases emergency fixes as some of the world’s biggest websites say they were targeted by hackers

PHP urges organizations to deploy the fixes immediately, as threat actors start abusing the php2shell bug

Website admins across the world bracing for impact following major PHP flaw reveal

PHP notifies the community of two critical RCE flaws, says patch is coming imminently.

The dark side of ‘free’ mobile games — how developers reverse-engineer your patience to milk ad revenue
The dark side of ‘free’ mobile games — how developers reverse-engineer your patience to milk ad revenue

Block Blast reportedly earned $127 million from ads, but an investigation uncovered code allegedly manipulating difficulty, player profiling, and incentives to watch ads.

A nightmare scenario for supermarkets: Hidden daily passwords and command injection flaws leave thousands of Danfoss supermarket systems open to remote takeover
A nightmare scenario for supermarkets: Hidden daily passwords and command injection flaws leave thousands of Danfoss supermarket systems open to remote takeover

Claroty researchers found 2,765 publicly accessible Danfoss refrigeration systems and three vulnerabilities involving hidden passwords, command injection, and web server manipulation.