PHP maintainers have issued mitigation advice for a new remote code execution vulnerability, CVE-2026-115560, which requires a rare combination of configuration settings to exploit.
Security researchers have confirmed active exploitation of PHP2Shell vulnerabilities, allowing remote code execution. A second, unpatched vulnerability has also been identified affecting certain configurations.
Dating platforms collect intimate location and lifestyle records. Learn how third-party trackers exploit mobile profiles and practical ways to protect your personal safety.
A new security risk has emerged targeting AI coding agents, where malicious files placed in a developer's Downloads folder can trick autonomous tools into installing harmful code.
Bright Security has launched STAR Fuzzer, an agentic security tool that automates the creation of fuzzing harnesses to identify zero-day vulnerabilities in security-critical code.
