US government says hackers are now exploiting critical PHP web bugs

The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web’s software.

Japan internet giant GMO says hackers posted stolen customer data

Japan’s GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.

UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court

Jess Asato’s public campaigning for victims of online abuse put her in the crosshairs of Grok’s deepfake scandal. Then the UK member of parliament became a victim of the abuse herself.

Bitdefender’s new tool maps how attackers could reach critical systems
Bitdefender’s new tool maps how attackers could reach critical systems

Bitdefender has launched GravityZone Exposure Management, which combines vulnerability discovery, internet-facing asset scanning, attack-path mapping and per-user hardening. It is available now on Windows, as an add-on or standalone. Bitdefender did no…

Over 525,000 hit in massive University of Copenhagen data breach

Even some PIN codes were stolen, forcing the University to reset them.

DeepSeek’s latest model still resists shutdown in safety tests
DeepSeek’s latest model still resists shutdown in safety tests

DeepSeek’s newest AI model is safer than its earlier versions, but it still sometimes switches off the software meant to shut it down. That is the finding of independent tests by a Chinese AI-safety group, Reuters reported. The group, Fangcun AI, publi…

Israeli ad tech firm heavily targeted Starlink users, sources say
Israeli ad tech firm heavily targeted Starlink users, sources say

An Israeli ad company showed huge numbers of ads to people using Starlink, SpaceX’s satellite internet service, probably to track them. That is what researchers believe, Reuters reported on Tuesday, citing six people who know about the work. The resear…

Microsoft ships emergency .NET fixes for a critical Brotli flaw
Microsoft ships emergency .NET fixes for a critical Brotli flaw

Microsoft shipped out-of-band updates for .NET, Visual Studio and PowerShell on Sunday. They fix CVE-2026-111497, a buffer overflow in Brotli, Google’s widely used compression library, which OpenAI’s Codex Security team reported. Node.js, Python packag…

A 16-year-old bug could be putting millions of routers at risk — despite Broadcom saying it patched the issue years ago

Broadcom says it fixed this 16-year-old Wi-Fi flaw in 2018, but the fix never reached the routers, and attackers in range need no password