Software maintainers have released emergency security updates for a critical buffer overflow vulnerability in the open-source Brotli data compression library.
Security firm Sansec revealed a long-running campaign that has infected 953 online stores, predominantly using Magento, with obfuscated JavaScript code.
Web hosting provider DreamHost has forced password resets for email and FTP accounts following an operational disruption, advising users to review mailbox forwarding settings for signs of unauthorised access.
PHP has rebuilt its official Windows binary packages to patch CVE-2026-111497, a memory corruption vulnerability in the bundled Brotli compression library that could lead to code execution.
A supply chain attack dubbed Gheist is exploiting compromised GitHub tokens to scan developer repositories and harvest sensitive cloud credentials.
