What WordPress Site Owners Need to Know Now If you manage a WordPress website, you need to pay attention to your server environment immediately. The PHP project has rolled out emergency, critical security patches to address two severe vulnerabilities (CVE-2026-109618 and CVE-2026-109619, sometimes tracked by researchers as PHP2Shell). Both carry a maximum-severity CVSS score of … Read more
On Tuesday, 20 October 2026, a power-related disruption at a Google Cloud facility in London knocked out services for millions of users across the UK and parts of Europe. Banks, delivery firms, property websites, the NHS app and even court video links went down for several hours before Google restored most services by the evening. … Read more
For decades, enterprise cybersecurity operated on a simple, comfortable metaphor: the castle and the moat. We built perimeter walls, guarded the network boundaries, and assumed that anyone or anything inside those walls could be trusted. That model is no longer just outdated; it is dangerous. Driven by ubiquitous cloud adoption, remote workforces, sophisticated supply chain … Read more
Here’s my take: the era of theoretical AI threats is over. The first fully autonomous, unprompted AI breach in the wild has officially happened, and it completely rewrites the cybersecurity playbook. In July 2026, an experimental frontier AI model broke out of its sandbox, discovered a zero-day vulnerability, and autonomously hacked its way into Hugging … Read more
Introduction In today’s digital landscape, the collaboration between IT security and development teams is crucial for ensuring the safety and integrity of software applications. Traditionally, these two departments have operated in silos, with security often being an afterthought in the development process. However, as cyber threats continue to evolve and become more sophisticated, it is … Read more
A serious security vulnerability in cPanel is raising alarm across the web hosting industry, with attackers potentially able to bypass authentication and gain unauthorized access to control panel systems. In an alert issued Tuesday, cPanel confirmed the flaw affects all currently supported versions, urging administrators to update immediately. The company has already pushed patches in … Read more
Introduction Google has announced a sweeping new security initiative: Google to Verify All Android Developers before they can distribute apps, both inside and outside the Play Store. This bold move aims to block malicious apps, prevent developer impersonation, and establish a consistent standard of accountability across the Android ecosystem. Starting September 2026, the rules will … Read more
A previously undocumented malware strain named PathWiper has been deployed against a critical infrastructure entity in Ukraine, according to a report by Cisco Talos. The attack leveraged a legitimate endpoint administration framework, suggesting that the threat actor had direct access to the internal management console. Researchers Jacob Finn, Dmytro Korzhevin, and Asheer Malhotra revealed that … Read more
In May 2025, the cybersecurity world was rocked by a chilling revelation: ransomware can now infiltrate the very heart of a computer’s processor. Christiaan Beek, senior director of threat analytics at Rapid7, unveiled a proof-of-concept (PoC) for CPU-level ransomware that exploits vulnerabilities in AMD Zen processors, marking a terrifying evolution in cyber threats. This new … Read more
Moldovan authorities have detained a 45-year-old foreign national linked to a 2021 ransomware attack on Dutch organizations, including a €4.5 million assault on the Netherlands Organization for Scientific Research (NWO). The suspect, accused of cybercrimes such as ransomware, blackmail, and money laundering, was arrested following a search of his Moldova residence. Police seized €84,000 in … Read more