Windows Server 2016 Support Ends Soon, Plus 2 Stories
Windows Server 2016 support ends January 12, 2027. Plus Quest’s patient-record breach and the security risk left behind by an abandoned app.
A New PHP Risk Needs a Workaround, Plus 2 Stories
PHP disclosed a new session upload progress vulnerability with no fixed release yet. Here’s the temporary mitigation, plus AWS capacity pressure and PwC’s vendor incident.
Banks Block AI Agents, Plus 2 Tech Stories
Banks are blocking third-party AI agents from customer accounts, Microsoft tests step-by-step medical diagnosis, and Greece approves an under-15 social-media ban.
PHP Fixes Land as Attacks Surge, Plus 2 Stories
PHP fixes are available as exploitation attempts surge. Also: Meta faces a $25 billion privacy judgment, and data-center companies promise fewer secrets.
Critical PHP Fix Is Coming, Plus 3 Tech Stories
Two critical PHP flaws put website owners on alert. Plus OpenAI agents weaken their own monitors, Google Cloud disrupts banks, and Toyota recalls Land Cruisers.
AI Agents Breached 100 Websites, Plus 3 Stories
One hacker used AI agents to breach more than 100 websites. Plus grocery outages, Safari’s new tracking block, and rising fraud losses.
An AI Agent Shared a Home Address, Plus 2 Stories
An AI agent shared a seller’s home address. Plus Office 2021 loses security updates and Google launches Universal Cart across Search and Gemini.
When Security Tools Become the Attack Path
A cloud-backup incident exposes a bigger problem: the tools trusted to protect, administer, and restore a business need independent controls of their own.
Cloud Backup Attack Disrupts Recovery, Plus 2 Stories
ConnectWise suspends Cloud Backup after attackers enter Microsoft 365 tenants. Plus the truth about AI pricing and Meta’s disputed website terms.
Longtail Forge Update: When a Safe Upgrade Has to Stop
Two Longtail Forge upgrades stopped before changing the preview. Here’s what went wrong, what became safer, and what the October 14 demo upgrade actually proved.
Online Ads Delivered Spyware, Plus 3 Stories
Online ads became a zero-click spyware pipeline. Plus a critical Magento flaw, state lawsuits over ChatGPT safety, and new Temu limits in Texas.
Windows Updates Can Stall Exchange, Plus 4 Stories
October Windows Server updates can disrupt on-premises Exchange mail flow. Plus a BeyondTrust zero-day, court notices, Microsoft lock-in, and Android scams.
Your Security Tools Need Security, Plus 3 Stories
Palo Alto, Cisco, and Ahsay security tools are under active attack. Plus Florida’s social-media ban, remote-worker laptop farms, and browser updates.
Windows Fixes an Exploited Bypass, Plus 3 Stories
October’s Windows security update fixes an exploited download-warning bypass. Plus a Supreme Court privacy case, an Ivanti VPN zero-day, and a Docker Hub token flaw.
Supermarket Fridges Hacked, Plus 3 Tech Stories
A supermarket refrigeration cyberattack spoiled food and caused fires in France. Plus an exploited Bricksforge flaw, workplace data sales, and bank AI scrutiny.
Windows 11 24H2 Support Ends Tuesday, Plus 3 Stories
Windows 11 24H2 Home and Pro stop receiving updates October 13. Plus fake Claude installers, an exploited SonicWall flaw, and satellite-to-phone changes.