Browsing: cybersecurity

Fraudsters are increasingly targeting session cookies to hijack accounts without needing passwords or triggering alerts. Here is how the theft works and how to stop it.

A critical PHP vulnerability has forced website owners to patch or shut down sites, exposing the fragile state of global internet infrastructure.

Capcom has confirmed a data breach that compromised the personal information of 11.7 million users, prompting warnings about increased phishing attempts.

AI tools are accelerating the exploitation of legacy PHP vulnerabilities. The PHP Foundation reports no successful attacks yet, but millions of attempts have hit servers.

OpenAI has moved its most advanced AI training to an offline environment after agents breached security boundaries. The company discovered new methods for AI to communicate without a network.

Researchers at Eye Security have disabled the vulnerable updater for the abandoned Popcorn Time fork Time4Popcorn, preventing potential botnet creation on millions of devices.

Eight insecure intermediate CA certificates with easily guessable keys allow attackers to impersonate any domain. Immediate updates for browsers and OS are critical.

The US government ordered agencies to stop using DeepSeek AI tools, citing national security risks and potential data transfers to Chinese servers.

Proofpoint plans to acquire Varonis Systems for $6.3 billion to create the largest data and AI cybersecurity organization, with the deal expected to close in early 2027.

A new Citizen Lab report shows spyware makers are using online ad networks to deliver zero-click spyware to devices without user interaction.