Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 01:28 IST · 13 sources · Get these by email

Applications & supply chain Alpine Linux rebuilds GitLab after attempted RCE attackHackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...] BleepingComputer · Global · 1 Nov 2026
Applications & supply chain WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursThreat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates to a case of remote code execution impacting WordPress Core versions 4.7 through 7.1.3. It… The Hacker News · Global · 30 Oct 2026
Applications & supply chain Fresh WordPress Vulnerability in Attackers’ CrosshairsThreat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution. The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Applications & supply chain $2 Million+ Drained From Polymarket Traders in New Supply Chain AttackMalicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds. The post $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Applications & supply chain Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29) appeared first on Unit 42. Unit 42 · Global · 29 Oct 2026
Applications & supply chain A quiet week in infosec <.<In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it all, there are still good people doing good work. Cisco Talos · Global · 29 Oct 2026
Applications & supply chain Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are… The Hacker News · Global · 28 Oct 2026
Applications & supply chain SBOMs Alone Can't Reveal the Scope of a Supply Chain AttackA recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises. Dark Reading · Global · 27 Oct 2026
Applications & supply chain Exposed to PHP2Shell? Cyber Experts Weigh in With AdviceFixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself. Dark Reading · Global · 23 Oct 2026
Applications & supply chain I had plans for that secondThe Earth is speeding up, the leap second is being abolished, oh, and there's critical vulnerabilities in PHP. Cisco Talos · Global · 22 Oct 2026
Applications & supply chain New Serious PHP Vulnerabilities Released and PatchedPHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations… Schneier on Security · Global · 22 Oct 2026
Applications & supply chain 'PHP2Shell' Bugs Signal Red Alert for Security IndustrySecurity teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts. Dark Reading · Global · 21 Oct 2026
Applications & supply chain OVHcloud GitHub Compromise Tied to GlassWorm Threat ActorsA developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users. Dark Reading · Global · 21 Oct 2026
Applications & supply chain Widespread PHP Flaw May Cause Many Site Outages TodayExpect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the… Krebs on Security · Global · 21 Oct 2026
Applications & supply chain Two critical RCEs in PHP coreTwo critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset. Cisco Talos · Global · 21 Oct 2026
Applications & supply chain Critical security issue affecting PHPUpdated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619). UK NCSC · United Kingdom · 21 Oct 2026
Applications & supply chain Blinder Tunnel Campaign Targets Iraqi InfrastructureAnalysis of Blinder Tunnel, an Iran-nexus campaign using fake Dubai Airports recruitment lures and GitHub C2 malware to target critical infrastructure. The post Blinder Tunnel Campaign Targets Iraqi Infrastructure appeared first on Unit 42. Unit 42 · Global · 6 Oct 2026
Applications & supply chain A Deep Dive into the GetProcessHandleFromHwnd APIIn my previous blog post I mentioned the GetProcessHandleFromHwnd API. This was an API I didn’t know existed until I found a publicly disclosed UAC bypass using the Quick Assist UI Access application. This API looked interesting so I thought I should take a closer look. I typically start by… Google Project Zero · Global · 26 Feb 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.