Sony is investigating a PSN Family Management flaw that let hackers add child accounts without 2FA. How to check and secure ...

GoAhead, the embedded web server behind the management pages of routers, printers, firewalls, and industrial controllers, has ...

Sony Network Communications, the Sony Group subsidiary that runs the Japanese internet service provider So-net, said on 27 ...

Roblox is accused of scraping 145.5GB of 3D models, including adult content, from Open3DLab, SFMLab and SmutBase via a ...

ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix 10 flaws, including Brotli RCE bug CVE-2026-111497 and three TLS hostname bugs.

CVE-2026-109618 and CVE-2026-109619: watchTowr confirms leaked CVSS 10 PHP RCE zero-days. Patches due October 22; only PHP 8 ...

(CVE-2026-109618, CVE-2026-109619): critical unauthenticated RCE in PHP core. Patch out Oct 21. WordPress, Magento, Drupal ...

Trend Micro’s ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel lists. Who is exposed and how to check.

The Go team released emergency updates late Monday that caused the language’s certificate verifier to reject eight ...

Mudhra is exiting global TLS after 8 CA keys, one literally the number 4, proved crackable. What happened, who's affected and ...

Oracle’s CVE-2026-91403 alert stops Java SE and GraalVM trusting eight compromised eMudhra intermediate CA certificates.