Latest news as of 10/21/2026, 1:47:40 AM
Bleeping Computer
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. [...]
Bleeping Computer
Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites. [...]
The Register
Massive clean-up job under way because this mess makes it possible to impersonate any website or service
The Register
IQ.Lvbs implies that rival Comma.ai isn't playing fair
Dark Reading
Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised.
Bleeping Computer
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. [...]
Bleeping Computer
Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts. [...]
Dark Reading
A judge ordered that Abdulrahman Alfozan be detained after he was arrested earlier this month for allegedly bugging an OpenAI conference room.
Bleeping Computer
OpenAI confirmed that its newer models are much better at writing and migrating software in older programming languages. [...]
The Register
Unit 42 investigates network compromises across numerous industries