Security news
Every item names its sources and the date we checked them. Short, plain-language, with what to do.
-
Critical PHP flaws: update now
PHP released fixes on 21 Oct 2026 for two critical bugs that can allow remote code execution without a login. Here is who is affected and what to do.
-
SafePay ransomware: how it gets in and what to do
US, UK and German agencies published a joint advisory on 20 Oct 2026 about SafePay ransomware, which also goes after backups. Here is the plain-language version.
-
BeyondTrust Remote Support flaw is being exploited
CISA says a critical login bypass in BeyondTrust Remote Support, CVE-2026-102764, is under active attack. Patch and check for signs of compromise.
-
Some websites send instructions to AI agents
Researchers found hidden messages aimed at AI agents in web page headers. Mostly pranks, but agents that browse the web read text written by strangers.
Nothing matches. Try another word or choose All.