-
Two critical PHP flaws have prompted the PHP security team to announce emergency updates for October 21. The announcement follows reports that information about the vulnerabilities circulated before their planned disclosure. In its October 20 advisory, the team scheduled the updates for 14:00 UTC on October 21. It assigned both vulnerabilities a severity score of…
-
A second Zeabur security breach in two months has prompted the developer hosting platform to announce its closure. The latest attack exposed information associated with 321,810 accounts and approximately 3.2 million environment-variable records. Attackers used leaked internal credentials to access hosting infrastructure, dedicated servers and the production database on October 14–15. Zeabur plans to begin…
-
OpenAI says GPT-6.1 Sol delivers substantial improvements in legacy code migration, including converting COBOL programs into newer programming languages. In the company’s evaluation, the model reached 97.9% accuracy at higher reasoning effort. The findings accompany broader improvements in programming languages with relatively limited training material. However, these evaluation results do not guarantee reliable performance across…
-
The DHS DeepSeek ban requires US federal civilian agencies within the department’s authority to stop buying covered products and remove them from government systems. The restrictions also extend to DeepSeek affiliates and third-party tools that incorporate its technology. The Department of Homeland Security published the order in the Federal Register on October 20. However, the…
-
The Ahold Delhaize cyberattack disrupted online shopping, mobile apps and other services across the United States and Europe. The retailer took some systems offline after discovering malicious activity, although its physical stores remained open. In an October 19 update, the company outlined its recovery progress. Several European websites and apps had returned, while teams continued…
-
A Revolut outage disrupted payments, transfers and app access worldwide on October 20, leaving thousands of customers struggling to use their accounts. The company later confirmed that it had restored all services following a Google Cloud incident. Revolut said customers’ money and personal data remained safe throughout the disruption. However, the outage affected a broad…
-
A police deepfake case in South Korea has raised questions about recruitment checks after authorities charged and detained a serving officer. The 28-year-old sergeant allegedly created sexual deepfakes of acquaintances and distributed unlawful material through Telegram. Records submitted by the National Police Agency to lawmaker Seo Myeong-ok describe approximately 400 deepfake videos and more than…
-
The latest Nikkei data breach exposed 1.83 million records after attackers used stolen credentials to access a development system. It marks the Japanese media group’s third cybersecurity disclosure in approximately a month. According to Nikkei, 150,000 records contained identifying information, while the remaining 1.68 million contained no identifiers. The company also said the incident did…
-
The Rank Math compromise turned some official downloads of the paid WordPress SEO plugin into a delivery mechanism for malware. According to the vendor, affected copies of Rank Math PRO version 3.0.123 could compromise websites when administrators activated them. The malicious downloads were available between October 15 at 20:02 UTC and October 16 at 07:12…
-
The AOMEI supply chain attack used short-lived changes to vendor-hosted files to deliver malware through its Backupper software, researchers report. Attackers restored the original files within minutes, making subsequent checks appear normal. ManageEngine’s Threat Analysis Lab investigated the campaign alongside Google’s Threat Intelligence Group and Mandiant. They attributed the activity to a threat actor tracked…