PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
arstechnica.com·3h ago32 results · clear filters
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
arstechnica.com·10h ago
Meta Muse exposes users' personal and business secrets when they share conversations
A single query is all that's required to find thousands of conversations listed by title.
arstechnica.com·17h ago
Recently fixed Plex Media vulnerabilities are being exploited to install malware
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
arstechnica.com·1d ago
ReactOS reaches major milestone with NTFS install support
ReactOS gains NTFS install support with new driver.
arstechnica.com·1d ago
OpenAI models hacked a crypto wallet and breached more websites
The actions could have resulted in criminal charges had humans been behind the keyboard.
arstechnica.com·4d ago
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
arstechnica.com·5d ago
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
arstechnica.com·6d ago
Anthropic warns small AI models could self-replicate through IoT devices
"Small weight-based replicators" could usher in a new generation of computer worms.
arstechnica.com·6d ago
Topgolf saved over $11.3 million after leaving VMware
Topgolf and VMware "ran deep" before the migration.
arstechnica.com·7d ago
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
"The current decline may be just the beginning of a new downward cycle."
arstechnica.com·11d ago
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
arstechnica.com·14d ago
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The reports of OpenAI agents harming 3rd party sites keep coming.
arstechnica.com·14d ago
Licensing costs driving 90 percent of VMware users to explore options: Survey
Users want to "reduce risk and avoid unnecessary disruption" while making changes.
arstechnica.com·14d agoMCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Trust gaps in the new protocol spread malicious prompts from one agent to another.
arstechnica.com·15d ago
Apple changes full-disk access permissions to curb abuse from AI agents
Meta says FDA isn't sufficient to Muse reading messages. Apple begs to differ.
arstechnica.com·18d ago
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
It has been a bad month for federal government cybersecurity.
arstechnica.com·19d ago
Memory executives expect RAM shortage to continue through 2028
Prices for memory sold for 2027 "are much higher than 2026 prices."
arstechnica.com·19d agoHeadlines and summaries belong to their publishers; every card links straight to the original article. Gathered from Hacker News, DEV, Ars Technica, TechCrunch and The Verge.