Blog

Sansec says a malware campaign compromised 953 online stores since July 2025, using stealthy Magento loaders, browser fingerprinting and webshells.

PHP warns of an unlikely CVE-2026-115560 RCE path tied to session handling and urges administrators to disable upload progress pending a fix.

Israeli startup Mave has emerged from stealth with $34 million to develop AI agents that investigate security alerts across enterprise tools.

Two critical PHP flaws enable unauthenticated remote code execution, with public exploit code and reported attacks prompting urgent patching.

Attackers are probing critical PHP2Shell flaws to deploy Mirai malware as researchers demonstrate an ASLR bypass, intensifying patching pressure on defenders.

Quest Diagnostics says attackers accessed patient records through Quanum Lab Services Manager, while the company investigates the scope and affected data.

INTERPOL says Operation Serengeti III arrested 1,462 suspects, disrupted 10,909 cybercrime networks and recovered more than $105 million.

Google’s updated privacy policy says Gmail, Drive and Photos data shared with Search or Gemini may inform personalized ads when users enable Personal Intelligence.

LiteLLM says attackers used an unrevoked master key and stolen GitHub tokens to publish a malicious v1.107.0 package and Docker images.

PHP warns of an unlikely unpatched RCE path in session uploads, urging administrators to disable upload progress until a routine fix arrives.