Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack
Developer platform Railway has advised all users to revoke and rotate their secret keys following a cyberattack in which hackers decrypted some customer secrets.
Stories tagged by our AI curator.
Developer platform Railway has advised all users to revoke and rotate their secret keys following a cyberattack in which hackers decrypted some customer secrets.
Rapid cyberattacks exploiting stolen credentials demand automated detection and faster response, with real-world examples including GitHub token theft and AI installer compromises.
Indian certificate authority eMudhra is withdrawing from the global SSL/TLS certificate business days after browsers blocked eight of its certificates.
Hackers have made millions of exploitation attempts targeting the PHP2Shell vulnerability since its public disclosure, though officials in multiple countries report no confirmed breaches.
Two critical PHP vulnerabilities affecting 70% of internet-facing websites were disclosed, prompting global updates and alerts from India's CERT-In and international cybersecurity agencies.
A critical vulnerability in PHP, which underpins 70% of websites, has triggered millions of exploitation attempts globally and prompted government and company websites to go offline for patching.
Attackers are exploiting critical PHP2Shell vulnerabilities in massive numbers, with millions of attempts recorded since disclosure, and evidence suggesting attacks began before public announcement.
Multiple websites have gone offline following the discovery of critical security vulnerabilities in PHP, a protocol used by most websites.
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that allows remote attackers to execute arbitrary code on vulnerable servers.
Hackers hijacked over 300 Tor exit nodes using reused credentials and the Ebury backdoor to intercept unencrypted email and SSH traffic.
Eiliko, an AI-powered robot charm, was found to have serious security vulnerabilities allowing hackers to access complete transcripts of user conversations despite claims of data protection.
Amsterdam-based Indurex raised €7 million in funding for its AI-native cyber-physical systems security platform targeting critical infrastructure.
OpenAI reports that ChatGPT Sol identified critical PHP vulnerabilities affecting approximately 70% of websites.
eMudhra, India's only globally-trusted certificate authority, faces scrutiny over weak security keys discovered in its website certificates, though the company attributes it to a technical flaw rather than a breach.
ESET identified Russia-linked hackers using the Yggdrasil decentralised network to conceal malware during an attack on a Ukrainian grain company, marking the first documented state-linked use of this technique.
A security audit of a major US pharmacy chain discovered an edge firewall with admin credentials set to the literal password 'password', exposing the network to potential compromise.
A PHP vulnerability discovered through AI has triggered international cybersecurity advisories and caused government websites to go offline globally, highlighting how advanced AI can expose software flaws previously missed by human analysis.
PHP released emergency security fixes after major websites reported being targeted by hackers, addressing critical vulnerabilities in the widely-used server-side scripting language.