Apple Backports CoreGraphics Zero-Day Fix as CISA Flags PHP2Shell
Apple backported fixes for the actively exploited CVE-2026-86950 CoreGraphics zero-day to older iPhones and iPads, while CISA ordered…
2 min read
Cybersecurity
Reporting on Cybersecurity from Lazy Tensor.
Search this sectionA place, person or subject
Showing 9 stories tagged Technology
Turn off filter ×Matching reporting
Tailscale Warns of 11 ‘Tailworm’ Flaws Including Root SSH Escalation
Tailscale confirmed it is working to release a patched client by the end of Tuesday, Oct. 27, to fix 11 vulnerabilities—collectively…
2 min read
Warp Discloses Vendor Breach Exposing AI Agent Logs and Telemetry
Warp founder and CEO Zach Lloyd disclosed that an attack on a third-party vendor in Warp’s infrastructure exposed AI agent decision…
1 min read
University of Copenhagen Breach Hits 525K; DreamHost Resets Passwords
The University of Copenhagen confirmed that hackers accessed a test environment containing personal data of 525,000 people and exposed…
2 min read
Critical PHP2Shell RCE Flaws Confirmed Exploited in the Wild Against Apache mod_php
Two critical remote code execution vulnerabilities tracked as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) have been confirmed…
3 min read
Unrevoked Master Key Behind LiteLLM PyPI Malware Downloaded 49,000 Times
Open-source AI developer tool LiteLLM reported that an unrevoked master key accidentally exposed in a configuration file in May…
3 min read
Matching reporting
Malicious AGENTS.md Files in Downloads Folder Used to Hijack AI Coding Agents
Researchers at Forever Security discovered a real-world attack in which a malicious AGENTS.md file in a user’s ~/Downloads directory…
3 min read
Matching reporting
CISA and Unit 42 Issue Urgent Patch Directive for Critical PHP2Shell Remote Code Execution Flaws
PHP maintainers release emergency 8.5.12 and 8.4.27 security updates as defenders mitigate active exploitation across cloud servers.
2 min read
CISA and FBI warn SafePay has hit 600 networks since 2024
Federal authorities warn over 600 municipal and healthcare networks compromised since 2024 via credential theft and unpatched VPN…
2 min read