Volunteer-led PHP, which powers most websites, is increasingly under threat from cyberattacks using AI capabilities.

Coruna and DarkSword exploit kits hack iPhones through malicious websites, stealing private data without apps or user interaction.

Hackers are using Coruna and DarkSword exploit chains across a large web network to compromise vulnerable iPhones without ...

Drop-in agent skills evolve quickly. Yet 26 percent of the 31,132 public skills analysed in a January 2026 study carried at ...

Chainguard's Patrick Smyth told AI Engineer exploits now beat patches by 70 days, citing Mandiant and frontier agents. The ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

Multiple tech companies and projects have recently pushed patches for a vulnerability called "HTTP2Shell" which could enable remote code execution (RCE) attacks, similar to the recent "PHP2Shell" ...

The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.

Tailscale is preparing a client update for Tailworm, SSH flaws that researchers say let one hacked device gain root on others.

Microsoft and the PHP project have released fixes for the Google Brotli decoder flaw, CVE-2026-111497, after Node.js patched ...

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

Artificial intelligence is accelerating the discovery of hidden software vulnerabilities, raising concerns about fresh internet disruptions in the coming months. Recent flaws in PHP, Node.js and Plex, ...