AI
A Rough Day for Cybersecurity: New Vulnerabilities Found in PHP, Node.js, and LiteLLM
From AI-discovered PHP flaws to critical security gaps in Node.js and LiteLLM, cybersecurity teams are facing a challenging week.
Tag
#Kiberxavfsizlik
The latest news, analysis and stories about Kiberxavfsizlik — TECC.UZ.
320 articles
Cyber
CISA Warns of Plex Servers Exploitation
The U.S. cybersecurity agency is warning that attackers are actively exploiting vulnerabilities in Plex Media Server.
IT
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released urgent patches addressing critical remote code execution vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619.
Cyber
Critical PHP vulnerability puts websites on high alert
Security patches for PHP are rolling out today to fix two critical vulnerabilities that could potentially disrupt websites across the internet if ignored.
Cyber
CISA: SafePay Ransomware Hits Over 600 Critical Infrastructure Organizations
The Cybersecurity and Infrastructure Security Agency (CISA) reports that the SafePay ransomware gang has breached over 600 critical infrastructure organizations globally since 2024.
AI
ChatGPT introduces a new locked folder to keep your chats private
OpenAI's chatbot now features a dedicated locked folder to help users shield their sensitive conversations from prying eyes.
AI
US orders federal agencies to remove China’s DeepSeek AI from their systems
Citing national security concerns, the US has ordered federal civilian agencies to remove DeepSeek products and third-party services built using its technology.
Cyber
OVHcloud CLI releases backdoored on GitHub to steal developer secrets
French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface tool to distribute information-stealing malware.
AI
Blackwall quadruples valuation to $2.2B amid growing web bot traffic
Blackwall has secured $100 million in funding to expand its website security and filtering tools as AI and bot traffic surges online.
Cyber
Popular WordPress SEO Plugin Rank Math Compromised with Backdoors
Last week, some downloads of the Rank Math PRO WordPress plugin from the official website were compromised in a supply-chain attack that planted hidden backdoors.
Cyber
Hackers breach popular AI coding tool OpenCode, running up user charges
Open-source AI coding agent OpenCode suffered a security breach where hackers stole API keys and accumulated unauthorized charges on users' accounts.
Cyber
Bullhorn takes staffing platform offline to contain cyberattack
Staffing software company Bullhorn has disabled access to its platform following a cyberattack that caused system-wide outages.
AI
Inside the Underground Market for Know Your Client Services and KYC Bypasses
Cybercriminals are commercializing forged documents, deepfakes, and live verification services to bypass KYC checks.
Cyber
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
ConnectWise shut down its Cloud Backup service after hackers accessed application identities and compromised Microsoft 365 tenants.
AI
AI Model Claude Solves a 25-Year-Old NSA Number Mystery
Anthropic's Claude neural network successfully cracks a complex cryptographic puzzle linked to the US National Security Agency that remained unsolved for a quarter of a century.
Cyber
Candiru Spyware Delivered to Al Jazeera Devices via Targeted Zero-Click Ads
Al Jazeera staff devices were targeted with Candiru spyware through malicious online ads in a zero-click attack requiring no user interaction.
AI
Android gets AI defenses against messaging scams and fake calls
Google has announced new AI-powered security features for Android devices to protect users against scam messages and call-forwarding abuse.
Cyber
Hackers Hijack D-Link and Ubiquiti Devices to Resell Stolen Bandwidth
A widespread proxyjacking campaign has impacted network devices across 34 countries, monetizing victims' internet connections.
Cyber
Malicious Arch Linux Packages Target AUR Users With Fake Tools
Threat actors uploaded malicious packages to the Arch User Repository, impersonating popular helper tools yay and paru.
AI
Is AI pentesting as good as a human pentester?
Intruder compares the strengths and weaknesses of AI and human approaches in security penetration testing.
AI
The growing threat of celebrity AI deepfakes
A viral AI-generated image involving actress Mia Goth highlights the increasing risks and deceptive potential of modern deepfake technology.
IT
Brooklyn Prosecutors and FBI Take Down Massive Crypto Fraud Network Targeting Russian Speakers
US authorities have dismantled a large-scale cryptocurrency fraud syndicate that systematically targeted Russian-speaking investors.
Cyber
Governments are abusing online ads for zero-click spyware attacks
Citizen Lab discovered evidence that numerous devices at Al Jazeera were hacked after exposure to malicious online advertisements.
Cyber
Microsoft and Japan dismantle cybercrime network behind over a billion scam messages
Microsoft and Japan's National Police Agency have teamed up to dismantle a massive cybercrime marketplace responsible for over a billion phishing messages.