Cyber Security News

• CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
  October 24, 2026
  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and […]
• BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
  October 23, 2026
  Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. […]
• Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
  October 23, 2026
  Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into […]

• Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach
  October 23, 2026
  Quest is the latest in a series of healthcare technology companies that have been hacked in recent months.
• Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
  October 22, 2026
  Microsoft points the blame for ConnectWise's breach at a China-aligned hacker, which relied on AI agents to rapidly hack into […]
• Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack
  October 22, 2026
  The vibe-coding platform said all of its customers should revoke and rotate their private keys, after hackers were able to […]

• What Is PHP? Why Are Government and Business Websites Going Offline?
  October 22, 2026
  A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch […]
• PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline
  October 22, 2026
  Governments and businesses around the world scrambled to prevent hackers from exploiting a vulnerability in PHP, a popular programming language.
• A.I. Discovered a Critical Vulnerability in PHP, a Coding Language Behind Many Websites
  October 21, 2026
  The disclosure heightened concerns about A.I.’s potential to upend cybersecurity unless shortcomings are addressed.