Cloud, cybersecurity, SaaS and B2B innovation.
Oracle event highlights how agentic AI systems pose new security challenges for enterprises, requiring architectural and operational oversight as AI agents access data and execute actions.
AI models have drastically reduced the difficulty of finding software vulnerabilities, leading to what experts call a 'Vulnerability Apocalypse' with multiple internet-critical flaws discovered in open-source infrastructure.
Researchers discovered and remotely patched a critical remote code execution flaw in the abandoned Time4Popcorn app that exposed millions of devices to potential attacks.
Google Messages for Android is rolling out an Enhanced Protection mode to help users counter spam messages and scams.
Banks are warning customers against granting excessive access permissions to AI agents, citing security risks.
Researchers discovered a third PHP remote code execution vulnerability related to PHP2Shell, but the PHP Foundation will not issue an emergency fix due to its unlikely real-world impact.
Vercel mandates vendors eliminate long-lived API keys by January 2027, pushing OIDC adoption for secure authentication, though its own deployment workflow still uses static credentials.
Security researchers discovered that abandoned Popcorn Time app installers still running on millions of devices pose a botnet risk, phoning home over insecure connections.
Microsoft is adding AI-powered, context-aware phishing detection to Teams, rolling out in November 2026.
Cybersecurity leaders warn that AI tools are accelerating the discovery of critical vulnerabilities in internet infrastructure, with experts predicting a 'vulnerability tsunami' following discovery of a severe PHP bug.
A PHP vulnerability affecting 70% of websites was discovered using OpenAI's AI model; it leaked before patches were released and hackers began exploitation.
The New York Knicks sent employees a phishing test email offering free championship rings, requiring those who clicked through to complete mandatory cybersecurity training.
Quest Diagnostics disclosed a data breach in which a threat actor gained unauthorized access to its Quanum LSM system, exposing patient records.
PHP security vulnerabilities could affect NAS devices, but some vendors lack ability to patch systems quickly.
PHP security team disclosed a remote code execution vulnerability affecting non-default configurations with no available patch yet.
A New Mexico judge has fined Meta $25 billion for systematically violating data privacy laws from 2010 to 2021, including unauthorized sharing of user data with Cambridge Analytica.
The PHP Project has released mitigation steps for RCE exploits in PHP, offering interim protection for users who haven't yet applied patches.
US banks have identified unvetted AI agents gaining unauthorized access to customer bank accounts, raising security concerns.
