Cyber
Critical 'HTTP2Shell' Brotli Vulnerability Triggers Emergency Patches
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.
Tag
#Kiberxavfsizlik
The latest news, analysis and stories about Kiberxavfsizlik — TECC.UZ.
320 articles
AI
AI coding agents hijacked using malicious instruction files
Researchers discovered a malicious markdown file in a Downloads folder that tricked an AI coding agent into installing a rogue npm package.
IT
PHP-ocalypse: How two critical web bugs almost broke the internet
Two critical bugs in the PHP programming language, which powers the majority of the web, nearly caused a global internet crisis.
AI
OpenAI says it will no longer train its AI models on the live internet
OpenAI is cutting its frontier models off from the live internet, citing significant security risks after previous internal debates.
AI
OpenAI now trains its frontier AI models with no internet access
Following recent hacking incidents, OpenAI has shifted to training its most advanced AI models within an offline environment to ensure maximum security.
Cyber
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
Security researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, closing a major security flaw.
Cyber
Microsoft Teams to Introduce AI-Powered, Context-Aware Phishing Detection
Microsoft has announced plans to integrate AI-powered phishing detection into Teams messages, set to roll out in early November 2026.
IT
Microsoft: Windows Server 2016 to reach end of support
Microsoft has announced that Windows Server 2016 will stop receiving security updates after reaching its end of support in January 2027.
AI
Bitcoin Core changes security rules as AI makes finding code bugs dangerously easy
Bitcoin Core is updating its security rules as advanced artificial intelligence makes detecting code vulnerabilities dangerously fast and accessible.
AI
Securing AI Agents: Gen Digital Introduces Agent Trust Hub to Prevent Manipulation
AI agents can be manipulated through malicious emails and websites. Gen Digital explains how its Agent Trust Hub protects these autonomous systems.
Cyber
HPE Patches Critical RCE and Auth Bypass Flaws in ArubaOS
HPE has rolled out security updates addressing 72 vulnerabilities in ArubaOS, including eight maximum-severity remote code execution and auth bypass flaws.
Cyber
Capcom Confirms Data Breach Affecting 11.7 Million Accounts
Japanese gaming giant Capcom has confirmed a security breach on its CAPCOM ID membership service, exposing millions of user records.
AI
1Password introduces a new solution to secure AI agent account access
1Password has launched a new security solution designed to mitigate the risks associated with giving AI agents access to your accounts.
Cyber
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images designed to steal credentials and environment variables.
AI
1Password launches a way for AI agents to log in on your behalf without seeing your password
A new feature from 1Password allows AI agents to log into personal accounts while keeping the underlying credentials strictly private and secure.
Cyber
Arista Patches New VeloCloud Orchestrator Zero-Day Exploited in Attacks
Arista Networks has released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator On-Prem deployments.
Cyber
Disastrous PHP vulnerabilities were exploited days before patches were released
Security researchers at Amazon reveal that critical PHP flaws affecting websites worldwide were targeted by hackers days before official patches became available.
Cyber
Two major PHP vulnerabilities put massive chunks of the web in danger
Newly discovered flaws in the widely used programming language threaten millions of websites and platforms across the global internet.
AI
1Password lets AI agents use your passwords without seeing them
1Password is introducing a new feature that lets AI agents sign into your accounts securely without actually seeing or handling your passwords.
Cyber
Amazon says PHP2Shell exploitation began 4 days before patches
Security researchers at Amazon Threat Intelligence reveal that attackers targeted PHP2Shell flaws four days before official patches were released.
Cyber
What’s going on with the web? The PHP issue and sites going offline
A significant number of websites are going offline deliberately by their owners due to extremely dangerous security vulnerabilities found in PHP.
Cyber
GitLab Issues Patches for Maximum Severity Code Execution Flaw
GitLab has released security patches to address a critical Regular Expression Compiler vulnerability that allows remote code execution on vulnerable servers.
AI
Google Chrome adds Gemini-powered scam detection and ClickFix warnings
Google Chrome is rolling out advanced security features powered by Gemini to protect users from deceptive websites and ClickFix attacks.
Cyber
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers from the Lazarus group are utilizing post-quantum cryptographic mechanisms to securely deliver malware in their latest cyber operations.