Skip to the shops
Security
Security Disclosure: Wednesday October 21st
Railway detected anomalous activity involving systems that store customer environment variables and recommends your imme...
AI & ML
Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to...
AI & ML
CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
OverviewOn October 21, 2026, the PHP project announced security releases for two critical vulnerabilities in PHP. CVE-20...
AI & ML
There's only so much code: the rise in vulnerability numbers
The September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities w...
AI & ML
CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild
OverviewOn October 15, 2026, BeyondTrust disclosed a critical authentication bypass in Remote Support (RS), its platform...
AI & ML
This Week in Security: Critical DNS Keys Rotated, Hacking Freezers Isn’t Cool, OpenAI Spies On Itself, and Advanced Hardware Wallet Hacks
Critical Internet keys changed this week. Did you notice? The keys behind DNSSEC, the system for cryptographically vali...
AI & ML
2026 Hackaday Supercon: Workshops are Open!
Supercon is Hackaday’s annual gathering, and you absolutely need to be there. Today, we’re pleased to announce our lineu...
AI & ML
Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
OverviewOn October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication by...
AI & ML
CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
OverviewOn October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wrapar...
AI & ML
Hero or hooligan: Orpheus in the underworld
The great Thracian bard, and accomplished poet and musician, he could charm the animals with his lyre. But when he marri...
AI & ML
Introducing Railway Authentication via identity-aware proxy
Railway Authentication implements an identity aware proxy at the service or environment level to lock down sensitive htt...
AI & ML
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
OverviewOn October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access...
AI & ML
The Fine Art of Frustrating the Adversary
What really frustrates an adversary? Eight Cisco Talos researchers share practical ways to make their next move slower a...
AI & ML
Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)
OverviewOn September 30, 2026, Cisco published a security advisory for CVE-2026-76504, a critical API authentication byp...
Development
Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772
OverviewOn September 27, 2026, Citrix disclosed eight new vulnerabilities affecting NetScaler ADC and NetScaler Gateway,...
AI & ML
CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM
OverviewOn September 22, 2026, F5 published a security advisory for CVE-2026-94127, a critical heap-based buffer overflo...
AI & ML
Securing the unpatchable in an age of AI-driven vulnerabilities
Advances in AI technology will continue to identify vulnerabilities that in some circumstances are difficult, or effecti...
AI & ML
CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
OverviewOn September 14, 2026, Cisco published a security advisory for CVE-2026-76461, a critical SQL injection vulnerab...
AI & ML
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
OverviewOn September 10, 2026, GitLab published a critical patch release for GitLab Community Edition (CE) and Enterpris...
Security
Microsoft Plugs Nearly 1,000 Security Holes
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other soft...
AI & ML