PHP warns it plans to release 2 emergency patches imminently
PHP maintainers plan to release emergency patches for two critical vulnerabilities rated 9.2 out of 10 in severity, affecting billions of websites worldwide.
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
An Anthropic VS Code extension distributed through Cursor was backdoored for nearly 12 hours, potentially affecting up to 5,000 developers by installing persistent SSH backdoors on their machines.
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
A new UEFI bootkit called BlackX has infected fully patched Windows machines by exploiting gaps in Microsoft’s Secure Boot protections, raising questions about patch deployment clarity.
Food suppliers in UK hit by cyber-attacks after freezers targeted in Europe
UK food suppliers experienced cyber-attacks after hackers compromised freezer controls across European supermarkets, raising temperatures to dangerous levels, though national impact remained minimal.
VMware releases vSphere Express for virtualization on up to 128 cores
VMware announces vSphere Express, a lower-cost virtualization product supporting up to 128 cores, targeting small and medium-sized businesses that previously felt pushed toward expensive flagship offerings.
Hackers exploited iOS and Android flaws to infect phones
Hackers linked to Russia’s Foreign Intelligence Service exploited patched iOS and Android vulnerabilities to target visitors of websites including one tied to American independence celebrations, researchers reported.