Tag: computer
-
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine.The updater belongs to Time4Popcorn, an abandoned copy of Popcorn Time, a free…
-
The race to fix huge PHP code flaw at the heart of the internet – The Latest
Tags: attack, computer, control, cybersecurity, data, exploit, flaw, government, hacker, Internet, programming, technology, vulnerabilityWebsites around the world have been taken offline as governments and businesses scramble to fix a flaw in the computer language PHP. There are fears that hackers could exploit the vulnerability to steal data, take control of web servers and disrupt services. Millions of attempts have already been made to attack websites since the issue…
-
The Guardian view on AI safety: the push for global regulation must advance | Editorial
Tags: ai, attack, breach, computer, control, cyber, exploit, flaw, intelligence, openai, regulation, software, threat, vulnerabilityThe current US administration is an obstacle, but public demand for protection will ultimately prevailOrganisations around the world <a href=”https://www.theguardian.com/technology/2026/oct/21/flaw-in-php-computer-language-leads-to-shutdown-of-websites-around-world”>scrambled on Thursday to fix critical flaws in PHP, the software that powers much of the web. The vulnerabilities could allow attackers to take control of affected servers. Some websites were taken offline as a precaution…
-
The race to fix huge PHP flaw at the heart of the internet – The Latest
Tags: attack, computer, control, cybersecurity, data, exploit, flaw, government, hacker, Internet, programming, technology, vulnerabilityWebsites around the world have been taken offline as governments and businesses scramble to fix a flaw in the computer language PHP. There are fears that hackers could exploit the vulnerability to steal data, take control of web servers and disrupt services. Millions of attempts have already been made to attack websites since the issue…
-
Pretty Huge Problem with the internet The Latest
Tags: attack, computer, control, cybersecurity, data, exploit, flaw, government, hacker, Internet, programming, technology, vulnerabilityWebsites around the world have been taken offline as governments and businesses scramble to fix a flaw in the computer language PHP. There are fears that hackers could exploit the vulnerability to steal data, take control of web servers and disrupt services. Millions of attempts have already been made to attack websites since the issue…
-
What is PHP and how serious is the computer language flaw causing website shutdowns?
Tags: attack, computer, cyber, data, exploit, flaw, government, hacker, open-source, programming, vulnerabilityAn estimated 70% of websites use the open-source language. What is the identified vulnerability in it?Website owners faced millions of attempts to exploit a serious security vulnerability in their programming language, it has emerged, triggering a rush by governments and businesses to fix the problem.The <a href=”https://www.theguardian.com/technology/2026/oct/21/flaw-in-php-computer-language-leads-to-shutdown-of-websites-around-world”>newly discovered vulnerabilities in PHP, a programming language that…
-
Pretty Huge Problem with the internet – The Latest
Tags: attack, computer, control, cybersecurity, data, exploit, flaw, government, hacker, Internet, programming, technology, vulnerabilityWebsites around the world have been taken offline as governments and businesses scramble to fix a flaw in the computer language PHP. There are fears that hackers could exploit the vulnerability to steal data, take control of web servers and disrupt services. Millions of attempts have already been made to attack websites since the issue…
-
Websites across world hit by millions of attempts to exploit PHP code flaw
Tags: computer, control, cybersecurity, data, exploit, flaw, government, Internet, programming, update, vulnerabilityProblem in language that underpins 70% of sites has led governments and companies to pull sites offline to patch faultWebsites around the world have been hit by millions of attempts to exploit a recently discovered vulnerability in their code, cybersecurity companies have said, as the US National Security Agency warned the flaw could allow attackers…
-
AOMEI Backupper servers hijacked for minutes at a time to push backdoor
An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, security researchers discovered. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/20/aomei-backupper-compromised-supply-chain/
-
Nearly 480,000 Phishing Emails Traced to Computer Hidden Behind Hotel Fridge
Japanese police arrested a Chinese couple accused of hiding a computer in a Kobe hotel to send phishing emails and using stolen credit card details for purchases. First seen on hackread.com Jump to article: hackread.com/phishing-emails-traced-computer-behind-hotel-fridge/
-
US Army is developing AI agents that could strike enemy networks and vanish without a trace
The US Army is looking for AI agents that can slip into an adversary’s network, find their target, copy themselves onto nearby tablets and computers, and then erase … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/20/us-army-ai-agents-echotribble/
-
Neuro-Symbolic AI Could Make Computer Agents Cheaper
Hybrid Neuro-Symbolic Approach Reuses Workflows, Cutting Token Costs for Repetitive Tasks. Autonomous computer company Simular found a way to run computer agents more cheaply, using a method typically used to improve accuracy. The company applied a hybrid of neuro-symbolic AI so its computer-use agent, Sai, discovers workflows and follows those same steps at each run…
-
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel’s live cloud sandboxes, and Vercel confirmed it.The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel’s networking code, not…
-
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing efforts to disrupt North Korea’s fraudulent remote IT worker (ITW) scheme.The indictment charges a mix of U.S. citizens and Chinese nationals for their roles in an IT worker conspiracy affecting more than 70 U.S.…
-
Anthropic warns small AI models could self-replicate through IoT devices
“Small weight-based replicators” could usher in a new generation of computer worms. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/anthropic-warns-small-ai-models-could-self-replicate-through-iot-devices/
-
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said.Its researchers built the attack in six days by directing AI agents running OpenAI’s publicly available GPT-5.6 Sol model. Google has since…
-
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over.The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into handles passwords…
-
Andover Confirms Cyberattack Reached Its Systems, Investigation Continues
An attacker got into some of Andover’s computer systems during the Andover cyberattack in August; Town officials confirmed Thursday, though they cannot yet say whether any data was taken. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/andover-cyberattack/
-
Quantum computers could break today’s encryption. Washington needs to prepare now.
As advances lower the barrier to breaking current encryption, Washington must move with equal urgency on post-quantum defenses. First seen on cyberscoop.com Jump to article: cyberscoop.com/quantum-computers-could-break-todays-encryption-washington-needs-to-prepare-now/
-
US posts $10 million reward for accused Chinese ‘Hafnium’ hacker
U.S. officials say Zhang Yu was a prominent figure in the Hafnium campaign, which saw hackers breach thousands of computers and steal troves of documents. First seen on therecord.media Jump to article: therecord.media/accused-hafnium-hacker-zhang-yu-10million-reward
-
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer (aka Psychedelic Stealer).The activity, which was observed by the agency in September 2026, has been attributed to a threat cluster dubbed UAC-0277. It did not disclose…
-
Former Employee Sentenced for Damaging Employer’s Windows Network Infrastructure
A former infrastructure engineer has been sentenced to 32 months in federal prison for damaging his employer’s computer network and demanding a ransom in Bitcoin. Daniel Rhyne, 59, of Kansas City, Missouri, received the sentence from U.S. District Judge Michael A. Shipp on September 28, 2026, in Trenton, New Jersey. Rhyne previously pleaded guilty to…
-
Google Gemini to Gain Full Computer Access With New Permission
Google is reportedly testing a new Gemini Desktop feature that could give its AI agent extensive control over a user’s Mac. This includes access to files, interaction with installed applications, and network communication, all with fewer prompts requiring user approval for each action. Currently, Google has not publicly released this capability, and it has not…
-
Russia’s Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a backdoor on their Windows computers, according to Microsoft.The campaigns, aimed at people and organizations tied to Ukraine, have affected more than 100 organizations since January, mostly in the U.S. and U.K. At least one computer was…
-
New Spectre v2 attack variant leaks Linux root password hash in minutes
A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in 3-5 minutes on average. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-spectre-v2-attack-variant-leaks-linux-root-password-hash-in-minutes/
-
Attackers build “silent” cryptominer on victim’s machine and give themselves away
Security researchers at Huntress have uncovered an unusual attack in which a threat actor compiled a cryptocurrency miner directly on a victim’s computer, rather than simply dropping a ready-made one, and in doing so generated so much activity that the intrusion stood out. The incident began in early September 2026 with the exploitation of CVE-2025-4632,…
-
Shai-Hulud Attack Nips Cyber-Firm CrowdSec’s GitHub Data
Threat actors stole 170 private repositories using an OAuth token stolen from a former employee’s computer through the TanStack npm supply chain attack. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/shai-hulud-attack-cyber-firm-crowdsec-github-data
-
Data dive: Mapping UK police forces’ hyperscale dependence
Computer Weekly used public DNS records to map which outside companies Britain’s 48 police forces connect to and found a service that has quietly standardised on one US hyperscaler First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366650799/Data-dive-Mapping-UK-police-forces-hyperscale-dependence
-
Google says Gemini breached three companies during security test
Google’s artificial intelligence model Gemini accessed computer systems belonging to three real companies without authorization during a cybersecurity test in May, the latest in a string of similar incidents. First seen on therecord.media Jump to article: therecord.media/gemini-google-cyber-breach