A New PHP Risk Needs a Workaround, Plus 2 Stories
PHP disclosed a new session upload progress vulnerability with no fixed release yet. Here’s the temporary mitigation, plus AWS capacity pressure and PwC’s vendor incident.
WordPress
PHP Fixes Land as Attacks Surge, Plus 2 Stories
PHP fixes are available as exploitation attempts surge. Also: Meta faces a $25 billion privacy judgment, and data-center companies promise fewer secrets.
Critical PHP Fix Is Coming, Plus 3 Tech Stories
Two critical PHP flaws put website owners on alert. Plus OpenAI agents weaken their own monitors, Google Cloud disrupts banks, and Toyota recalls Land Cruisers.
When Security Tools Become the Attack Path
A cloud-backup incident exposes a bigger problem: the tools trusted to protect, administer, and restore a business need independent controls of their own.
Supermarket Fridges Hacked, Plus 3 Tech Stories
A supermarket refrigeration cyberattack spoiled food and caused fires in France. Plus an exploited Bricksforge flaw, workplace data sales, and bank AI scrutiny.
OpenAI Agent Breached Australian Portal, Plus 3 Stories
Australia says an OpenAI agent crossed a government portal’s access controls. Plus an actively exploited WordPress core flaw, free AI training for small businesses, and Claude doing real biology research.
Brevo Attack Hit 100,000 Sites, Plus 3 Stories
A Brevo supply-chain attack exposed more than 100,000 websites to malware, Gemini crossed out of a security test, Gyazo disclosed a massive privacy breach, and Virginia moved to rein in data-center costs.
Spain Reports an AI-Agent Data Breach, Plus 4 Stories
Spain’s data regulator received its first report of an AI-agent-linked breach. Plus CenterPoint customer data, an actively exploited WooCommerce plugin, emergency Windows updates, and memory shortages hitting smaller hardware makers.
20M Children Faced Online Sexual Abuse, Plus 4 Stories
A UNICEF report estimates 20 million 12- to 17-year-olds across 21 countries experienced technology-facilitated sexual exploitation or abuse in one year. Plus active Elementor Pro attacks, GPT-6 Astra’s launch, Tesla Cybercab scrutiny, and a Plex security update.
Two WordPress Plugins Need Updates, Plus 4 Tech Stories
Two popular WordPress plugins need security updates. Also: a BGP hijack pushed a malicious Virtualizor update, Dropbox accounts were breached through Lenovo ID, Google gives sites an AI Search opt-out, and Florida and Texas push back on Flock cameras.
Nepal’s Flood Renews Warning Push, Plus 5 Tech Stories
Nepal’s catastrophic flood renews calls for real-time warning data. Plus stolen Claude sessions, malicious browser extensions, a WooCommerce admin flaw, false Defender alerts, and NASA’s Roman launch.
GiveWP Needs an Urgent Update, Plus 4 Tech Stories
GiveWP 4.16.7.2 fixes a critical RCE. Plus: a corrected federal hacking claim, Google Drive AI classification, Cursor’s OpenAI cutoff, and updated COVID vaccines.
Hackers Put Cursor to Work, Plus 4 Tech Stories
Aurora ransomware operators used Cursor inside real victim networks. Today’s brief also covers a critical Avada update, an 8.7-million-person airport breach, Anthropic’s Pentagon court win, and Google’s EEA search-policy change.
WordPress Server Troubleshooting Without Throwing Money at It
WordPress server troubleshooting is less about one magic fix and more about logs, incremental changes, cache behavior, and proving the repair holds.
An Unpatched Calix Router Flaw, Plus 3 Tech Stories
An unpatched Calix router flaw can expose home-network devices, miniOrange SSO bugs are being probed in WordPress attacks, the FCC is reconsidering E-Rate, and Alabama subpoenaed OpenAI.
Update Elementor Pro, Plus 2 Tech Stories
Elementor Pro has a critical file-upload flaw worth patching now, Microsoft disclosed a severity-10 Entra ID bug it already fixed, and TikTok agreed to a $400 million children’s privacy settlement. Updated August 23 after Microsoft corrected the Entra flaw’s exploitation status.
1 2