The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019.

A Privacy Feature Meets a Federal Charge An ordinary privacy feature has led to a threat of five years in prison. New court documents also point to a different reason for the search than the one o…

A Firewall Bug Becomes a Ransomware Tool A flaw in Palo Alto Networks enterprise firewalls has become a full-fledged ransomware tool. It lets attackers enter protected networks without a password.…

A Home Media Server Turns Into a Botnet Node An ordinary home media server can become a tool for cryptocurrency mining and for hidden relaying of other people’s traffic. Researchers found a …

TL;DR Fortinet is shipping Fortinet security updates for FortiOS, FortiManager and FortiAnalyzer on October 22, 2026. FortiMail and FortiAuthenticator fixes arrived a day earlier. The fixes cover …

At a glance Actor Swallowtail (APT28, Fancy Bear, Forest Blizzard), linked by the US government to Russia’s GRU Activity Cyber espionage using the Hookedge backdoor, credential theft, and SS…

The Proactive Agent Race Gets a Third Runner Generative AI is moving beyond chatbots that answer one question at a time. The new goal is the proactive personal agent. It watches your schedule, wri…

At a glance Malware family SafePay ransomware (encrypted files end in .SafePay) Threat actor SafePay ransomware group; no individuals named Targets At least 600 victims across critical infrastruct…

Reflected tricks fade in a second. Stored script stays on the server and waits for the next person, and that patience is what makes it pay.

One extra email address in a reset request was enough to hand an attacker the keys to any account.

On October 21, 2026, two critical vulnerabilities in PHP were publicly disclosed under the name PHP2Shell, tracked as CVE-2026–109618 and…

A certificate authority, India’s biggest bank, PHP, GitLab, Node.js, an AI library, a cloud host and supermarket fridges. Here’s what…

What if the technology watching you could be detected with a device that costs less than $10? At DEF CON, one of the world’s largest hacker…

Depending on which side you’re on, artificial intelligence (AI) is undoubtedly emerging as a powerful tool.

On 21 October 2026, the PHP project published a security advisory for two critical remote code execution vulnerabilities, CVE-2026–109618…

1. Incident Overview & Global Impact Timeline

PHP powers roughly 70% of websites on the internet.

Hunting an imposter account, a scheduled task and a certutil download through Windows process logs.

A hash table that lied about its own size. A request that died without cleaning up. A worker that handed the next visitor a pointer into…

For full-stack developers, infrastructure engineers, and DevOps leads, managing software deployments is a highly complex task — requiring a…