PHP-ocalypse: How two critical web bugs almost broke the internet

Two critical bugs in the PHP web programming language, used by the majority of the internet, threatened to upend the internet — and it’s unlikely to be the last major software scare.

The PHP Meltdown Shows How AI Makes Bugs More Exploitable

Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.

OpenAI cuts live internet from all frontier model training
OpenAI cuts live internet from all frontier model training

OpenAI has cut live web access from all training of its most advanced AI models. The models now browse and search a cached copy of the web instead, the company wrote in a blog post on Friday. “Based on the current state of alignment research, monitorin…

GMO asks Japan to use new cyber defence powers after hack
GMO asks Japan to use new cyber defence powers after hack

GMO Internet Group has asked Japan’s government to use its new active cyber defence powers against hackers who breached one of its services. The company made the request on Saturday, after the attackers demanded money. In a stock exchange filing on Sat…

The Pentagon has a covert tech sabotage agency that they really don’t want you to know about — and there are big questions about its oversight

Disruption of foreign tech through disinformation, cyberattacks, and sabotage could be the future of this new Pentagon office.

This AI tool can now turn ordinary household photos into location clues — so could law forces use the technology to scope out your home?

US police are using an AI tool to detect the location of properties based on interior photos, but the way tool accumulates its data drawn concern from Airbnb, Zillow, and others

Abandoned Popcorn Time apps had to be disabled to prevent a zombie army
Abandoned Popcorn Time apps had to be disabled to prevent a zombie army

Remember Popcorn Time, the app that served as an easy-to-use front end for streaming torrents of movies and TV shows? Development of the MPAA’s least-favorite app of the 2010s has been abandoned for years, but the “Netflix of Piracy” software is still installed on millions of devices that are just waiting to join a bot […]

Moonshot releases Kimi K3.1 Pro and says it cut its hacking skills
Moonshot releases Kimi K3.1 Pro and says it cut its hacking skills

Moonshot has released Kimi K3.1 Pro, an upgraded version of its open-weight Kimi K3, with full weights due by 4 November. It says the model nearly matches Claude Opus 5.5 on a coding test. Moonshot also says it removed hacking-related training data to …

PHP security issues could also threaten your NAS device — but not every vendor is able to patch just yet

The php2shell flaw affects more than just websites and web apps and some of these manufacturers were apparently caught off guard.

PHP2Shell: Haven’t patched yet? Take these steps now to mitigate

The PHP Project provides instructions to stop further RCE exploits in limited settings.