Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
vulnerabilityvia SANS Internet Storm Center
PHP.net announced that it will release a critical update today. We decided to change the infoCon to YELLOW due to the widespread use of PHP, the expected severity of the flaw (CVSS...
Oct 21, 2026 UTC
vulnerabilityvia The Hacker News
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back t...
Oct 21, 2026 UTC
vulnerabilityvia Krebs on Security
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities...
Oct 21, 2026 UTC
vulnerabilityvia The Hacker News
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12,...
Oct 21, 2026 UTC
vulnerabilityvia Krebs on Security
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's reco...
Oct 13, 2026 UTC
vulnerabilityvia Krebs on Security
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That repu...
Sep 16, 2026 UTC
vulnerabilityvia Krebs on Security
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft...
Sep 8, 2026 UTC