Search articles by title, topic or section.
Khabre desk
Recent reporting, analysis and explainers from the Cybersecurity desk.
technology
Capcom says unauthorised access involved 11,774,247 CAPCOM ID records worldwide. The company also confirmed unauthorised password changes on 196 accounts and said credit-card information was not among the affected data.
technology
PHP released security updates for two critical vulnerabilities that could allow unauthenticated remote code execution on web-facing installations. The project urges users to update to the fixed releases.
technology
Eye Security says it used the abandoned Time4Popcorn update channel to disable its vulnerable updater on Windows and macOS systems, sending more than 2 million update downloads. The company estimates millions of systems were affected, but says duplicated client IDs make precise counts difficult.
technology
Microsoft says the China-state-aligned group Storm-0940 used the ARTEX AI penetration-testing framework to automate attacks, including activity following a ConnectWise cloud application compromise. It observed privileged access in multiple customer environments, while noting that an affected application or successful sign-in alone does not establish that customer data was accessed.
technology
Wiz Research says it found four exploitable memory-safety bugs grouped under two PHP CVEs, including flaws that enabled unauthenticated remote code execution in demonstrations. The PHP project released patches on October 21, 2026.
technology
PHP’s maintainers have fixed a critical out-of-memory flaw that the project says can allow unauthenticated remote code execution. The patch is available in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12.
technology
NorForge reports finding more than 20 publicly exposed Cairn control panels likely linked to malicious activity. The panels reveal how operators used AI agents to probe websites, pursue access and, in at least one case, leave an uploader web shell.
technology
A Citizen Lab report links targeted ads purchased by Discover-Tech to Candiru spyware attacks against devices at Al Jazeera. Its analysis also found ads containing attacker scripts displayed across tens of thousands of apps and websites.
technology
Microsoft says its Digital Crimes Unit helped disrupt the primary developers and infrastructure of a phishing ecosystem. The company says operators using its tools facilitated more than 1 billion phishing emails and SMS messages to over 75,000 organizations since January 2026.
technology
Denmark’s CPR Administration says unauthorised users accessed names, addresses and CPR numbers associated with about 8.8 million registered people by misusing a private company’s lawful access to the system. The incident is under investigation, and officials have stopped the company’s access.
technology
Apple says it will add controls requiring users to take explicit action before granting apps Full Disk Access in macOS. The company cites the permission’s reach into private data and growing risks from more capable AI agents.
technology
Apple’s iOS 26.7.1 and iPadOS 26.7.1 address a CoreGraphics vulnerability that could allow arbitrary code execution. Apple says it is aware of a report of highly sophisticated exploitation against specific targeted individuals.
technology
UpGuard Research reports finding 16,326 Supabase databases with readable tables among about 300,000 candidate domains. Its analysis of database schemas found indicators of personal information in over half of those databases.
technology
SpyCloud says its analysis of 10,000 U.S. water-sector organisations found exposed credentials, session data and remote-access accounts across utilities and technology vendors. The findings describe potential identity attack paths, not confirmed intrusions into the systems analysed.
technology
Hudson Rock says a compromised, verified HBO Max Reddit account distributed 108 malicious advertisements over 48 hours. The ads used ClickFix prompts to make macOS and Windows users paste commands that could deliver credential stealers, fake wallet apps and cryptocurrency clippers.
technology
IDScan.net says an unauthorised third party may have accessed or copied customer names and government identification numbers stored on its cloud platform.
technology
Moonlock Lab’s first-half 2026 assessment describes cross-platform macOS campaigns, ClickFix social engineering, infostealers and developer-focused supply-chain risks, while adware remained the largest category in its endpoint telemetry.