Vulnerabilities
89 stories · back to Cybersecurity
Will AI expose the rickety infrastructure of the internet?
Website owners were told this week to immediately patch their sites against newly discovered vulnerabilities in the open source programming language PHP, or take the sites down if they could not update right away.
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast.
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.
HPE patches eight max severity RCE and auth bypass AOS flaws
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues.
Devastated forum user who accidentally broke the PHP news embargo comes clean
The user said that they only wanted to alert others about the importance of the upcoming CVE releases and weren't told about the embargo.
PHP: The three little letters wreaking havoc across the web
Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger. By some accounts, up to 70 percent of websites use PHP in some capacity.
The internet is having a very bad cybersecurity day
From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.
Cyberpunk 2077's update for Edgerunners 2 brings mods to PS5, Switch 2, and Xbox
Cyberpunk 2077 is getting a big new 2.5 update that, among other features, brings cross-platform mod support to consoles and content inspired by the new season of the Cyberpunk: Edgerunners anime on Netflix. There's a lot to unpack in the full patch notes.
Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers.
A critical PHP vulnerability may take websites down today
Security patches for the PHP programming language, widely used to build websites and web apps, are expected to roll out today, with the goal of fixing two critical vulnerabilities that could wreak havoc on the internet if left unchecked.
Our Latest Articles
Exploitable by Design: AI, Old Bugs, and the New Math of Risk
1 day agoVulnerability Handling Is Where Security Breaks Down
2 days ago
PHP2Shell Exploitation Shows Patch Windows Are Collapsing
3 days ago