CybernewsMillions of PHP attacks recorded as new unpatched vulnerability discoveredMillions of exploit attempts hit PHP flaws as a new PHP RCE vulnerability prompts advice to disable session upload progress. See what developers should do
Ars TechnicaUpdated Google privacy policy says your Gmail might be used for advertisingTurning on Personal Intelligence gives the company more data for ad targeting.
The Hacker NewsCritical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of ReleasesGitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.
ASD overhauls Essential Eight with new cyber framework https://ia.acs.org.au/article/2026/asd-overhauls-essential-eight-with-new-cyber-framework-.html
Information AgeASD overhauls Essential Eight with new cyber frameworkNew approach shifts focus from tick-box security to real-world risks.
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html
The Hacker NewsResearchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory BugA local OpenBSD 7.9 proof-of-concept chains a 37-year-old integer overflow with a kernel use-after-free to gain root; both flaws are patched.
