Hackaday

This Week In Security: Record Patch Tuesday, PHP’s Bad Time, The Oldest Vuln, AI Armies, And More

It’s no longer a proper month without Microsoft breaking its own record for security fixes, and October’s Patch Tuesday was no exception. Brian Krebs brings the roundup: more than ...
cyberpress

Oracle Patches Critical Java Security Flaw That Could Allow Hackers to Steal Data

Oracle released emergency Java security updates to address CVE-2026-91403, a critical vulnerability that could expose ...

Vulnerability in Java too. The 'real deal' arrives the day after the regular patch. Is an old version of Java lurking in your apps, too?

This week, it's PHP, Node.js, and JavaSecurity topics have been continuing this week. I've written about PHP and Node.js, and ...

I've listed all the vulnerabilities that appeared in October 2026, as many as I could find

I found 61 vulnerabilities that were released between October 1st and 22nd. Major regular updates were released in large ...
Tweakers

PHP dicht twee kritieke lekken nadat wereldwijd websites offline werden gehaald

PHP heeft een patch uitgebracht om twee kritieke kwetsbaarheden te dichten. De makers adviseren gebruikers om direct een ...
Tweakers

PHP waarschuwt voor twee ernstige bugs die makkelijk uit te buiten lijken

De makers van PHP waarschuwen website- en softwarebeheerders voor twee ernstige kwetsbaarheden in PHP. Het gaat om remote code execution-bugs die eenvoudig kunnen worden uitgebuit. PHP wil zelf later ...
Anthropic

Using Claude to reduce the attack surface of code

Automated attack surface analysis and reduction can meaningfully improve the security of deployed software in the near term.
Morning Overview on MSN

A new Android trojan called Hirudo swaps your banking app for a copy that steals the login

Hirudo, an Android banking trojan detailed by the mobile threat intelligence team at ThreatFabric, removes a genuine banking ...