2026年4月，一场没有硝烟的网络地震悄然席卷全球——不是勒索软件，不是APT组织突袭，而是一段写于2013年的PHP代码，在沉睡十年后突然‘诈尸’，被AI精准揪出，瞬间触发全球70%网站的紧急停摆警报。这不是科幻片预告，而是真实发生在我们指尖滑动之间的‘漏洞启示录’序章。 是的，你没看错：PHP——那个曾被戏称为‘Web世界老黄牛’的开源语言，至今仍在默默支撑着WordPress、Drupal、 ...

Attackers posing as internal IT staff on Microsoft Teams convinced employees to share remote access, then exploited misconfigured Active Directory Certificate Services to steal privileged login ...

Hackers exploit Microsoft Teams support calls to infiltrate corporate networks, steal data, and hijack privileged accounts.

Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through ...

Google and industry partners have dismantled the XCPE backdoor and botnet, which was intentionally developed and operated by OEM Videostrong Technology Co. for financial gain.

Indonesia’s prison system has once again become mired in scandal after the discovery of a series of luxury apartments allegedly used by inmates at a jail near the capital Jakarta.

Broadcom is utilizing artificial intelligence to identify and patch vulnerabilities within its TrueSource Spring Enterprise ...

In September 2026, a serious vulnerability was discovered in the WordPress core. It posed a risk that even an unauthenticated ...

Teku and Besu have updated their respective Docker images following the eMudhra incident, as the weak certificate key posed a ...

IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...

Oracle today announced a major new collaboration with OpenAI to redefine how the world's businesses run in the age of AI.

ShinyHunters exploited three chained Oracle PeopleSoft flaws enabling unauthenticated server takeover, with attacks spanning ...