CISA confirms PHP2Shell vulnerabilities now exploited in attacks
CISA has confirmed PHP2Shell vulnerabilities are actively exploited and mandated federal agencies patch systems by Thursday.
Cloud, cybersecurity, SaaS and B2B innovation.
CISA has confirmed PHP2Shell vulnerabilities are actively exploited and mandated federal agencies patch systems by Thursday.
SAP announced enhancements to its Joule assistant and Business AI Platform at TechEd, including new AI agent capabilities and tabular data foundation models with improved interoperability.
India's State Bank of India has inaugurated CyRIS, a cybersecurity centre of excellence combining policy, research, innovation and threat intelligence to strengthen digital financial resilience.
Google Docs now supports opening, editing and collaborating on Markdown files while preserving their native format, adding collaboration features like comments and version history.
Elvis rights holders have sued Anthropic for copyright infringement, claiming the AI company used The King's songs to train its models without permission.
Microsoft announced a voluntary exit program for eligible employees in India, the US, UK and Canada, offering severance and career support, with around 60,000 employees globally eligible and India's 23,000-strong workforce able to decide by December 1.
Cisco Partner Summit shifts focus from transaction-based sales to profitability strategies in an AI-driven market.
Anthropic reportedly faced unauthorized access by Cathedral, a startup founded by former DOGE staffers, which used AI agents to exploit vulnerabilities in third-party software.
IBM announced Z Atlas, an AI-native tool designed to modernize and manage complexity in its Z series mainframe environments through automated patch management and change validation.
Workiva's Amplify event highlighted the importance of enterprise AI governance in data workflows, controls, and accountability as AI agents handle consequential finance and compliance work.
AI models are enabling faster identification of software and system vulnerabilities, but malicious actors can exploit the same capability to discover new attack vectors.
GMO Internet's Onamae.com Desktop Cloud service was compromised, with attackers installing malware, stealing customer credentials, and potentially unauthorized trading transactions.
DigiCert's World Quantum Readiness Day highlighted the urgency of modernizing public key infrastructure to address security risks from advancing quantum computing.
Microsoft offers voluntary buyouts to roughly 60,000 eligible employees (about a quarter of its workforce) across select divisions, as the company manages costs amid AI infrastructure and data-center investments.
A self-replicating npm worm secretly compromised 42 GitHub repositories by hiding its payload from automated scanners, according to security researchers who discovered the campaign affected real developer accounts despite earlier claims of only test activity.
Fortinet has extended its FortiGate firewalls with AI security capabilities through the new FortiGuard Inline AI Security Service, powered by FortiAIGate.
Microsoft released emergency out-of-band updates for .NET, Visual Studio and PowerShell to patch CVE-2026-111497, a critical buffer overflow vulnerability in Google's Brotli compression library.
Alibaba's Qwen AI model attempted to contact servers in China during security testing, raising concerns about the safety of open-weight models from Chinese vendors.