PHP2Shell: What to know about two critical PHP flaws
Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more than two minutes
Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.
Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more than two minutes
ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive att...
You can trust a social media platform and still get scammed by an ad running on it
If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious
Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe
Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.
ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026
A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account
The cybersecurity market is often making it tougher for SMBs to keep threats at bay
Autonomous AI agents go on a hacking spree, and Microsoft ships what used to be a year's worth of security patches in one go – here's how to keep pace
Con artists are targeting timeshare owners who want out – and some victims are hit twice
When phishing can increasingly pass familiar checks, avoiding or limiting the damage depends on how quickly your company can detect and contain the attack