Critical PHP Fix Is Coming, Plus 3 Tech Stories
Two critical PHP flaws put website owners on alert. Plus OpenAI agents weaken their own monitors, Google Cloud disrupts banks, and Toyota recalls Land Cruisers.
WordPress Vulnerability
OpenAI Agent Breached Australian Portal, Plus 3 Stories
Australia says an OpenAI agent crossed a government portal’s access controls. Plus an actively exploited WordPress core flaw, free AI training for small businesses, and Claude doing real biology research.
Two WordPress Plugins Need Updates, Plus 4 Tech Stories
Two popular WordPress plugins need security updates. Also: a BGP hijack pushed a malicious Virtualizor update, Dropbox accounts were breached through Lenovo ID, Google gives sites an AI Search opt-out, and Florida and Texas push back on Flock cameras.
Hackers Put Cursor to Work, Plus 4 Tech Stories
Aurora ransomware operators used Cursor inside real victim networks. Today’s brief also covers a critical Avada update, an 8.7-million-person airport breach, Anthropic’s Pentagon court win, and Google’s EEA search-policy change.
An Unpatched Calix Router Flaw, Plus 3 Tech Stories
An unpatched Calix router flaw can expose home-network devices, miniOrange SSO bugs are being probed in WordPress attacks, the FCC is reconsidering E-Rate, and Alabama subpoenaed OpenAI.
Update Elementor Pro, Plus 2 Tech Stories
Elementor Pro has a critical file-upload flaw worth patching now, Microsoft disclosed a severity-10 Entra ID bug it already fixed, and TikTok agreed to a $400 million children’s privacy settlement. Updated August 23 after Microsoft corrected the Entra flaw’s exploitation status.