#security
PHP2Shell Under the Microscope: Attackers Race to Exploit Critical PHP RCE Flaws, but No Confirmed Compromises Reported + Video

Introduction: A Dangerous Window Between Vulnerability Disclosure and Effective Exploitation The disclosure of two critical PHP remote code execution (RCE)…
PHP2Shell Under the Microscope: Attackers Race to Exploit Critical PHP RCE Flaws, but No Confirmed Compromises Reported + Video
Introduction: A Dangerous Window Between Vulnerability Disclosure and Effective Exploitation The disclosure of two critical PHP remote code execution (RCE) vulnerabilities has triggered a wave of scanning activity and attempts to prepare exploit tooling, raising fresh concerns about how quickly attackers can operationalize newly exposed security weaknesses. According to research attributed to Hunt.io, threat actors began probing for vulnerable systems and staging potential exploitation tools after details of the flaws leaked before patches were available.
undercodenews.com
October 22, 2026 at 10:38 PM
[some-subscribed-rss] New Post: Security advisory: update your JDK (CVE-2026-91403), by https://piefed.social/u/nemeski https://programming.dev/post/58367463
October 22, 2026 at 10:38 PM
🛡️ NVIDIA unveils an AI-agent security blueprint combining Vera CPUs, OpenShell, and BlueField-4 chips to isolate and monitor autonomous agents. AI security is leveling up!
October 22, 2026 at 10:38 PM
This is going to be one of the easiest security incidents to explain to people later. It's never going to take a lot of explanation to understand that 4 makes a terrible secret, no matter how far we get from the current regime of CAs.
October 22, 2026 at 10:38 PM
No, a secure border doesn't mean that. That's not what "borser security" means or ever has. Introduced/invasive species have nothing whatsoever to do with borders, they're a matter of bioregions.
October 22, 2026 at 10:37 PM
i should probably review my security posture
October 22, 2026 at 10:37 PM
It might seem, in retrospect, like naming a federal department "Homeland Security" made it pretty much inevitable that it would at some point become a Gestapo-like paramilitary organization sending goons around to arrest and disappear people.

In fact, many of us were weirded out by it at the time.
October 22, 2026 at 10:37 PM
Google has rolled out a change to Chrome that asks users for permission before making an insecure HTTP connection. The protection is now enabled by default for all users.

www.helpnetsecurity.com/2026/10/22/g...
Chrome puts insecure sites behind a permission prompt - Help Net Security
Chrome adds HTTPS protection, asking permission before insecure HTTP connections, helping keep users and their browsing data safe.
www.helpnetsecurity.com
October 22, 2026 at 10:37 PM
Banking apps and sites are having issues all over the place today. And this is happening when we avert a disaster. When a suffiiciently power swarm of malicious AI agents finds the next security flaw, there will be no warning.
October 22, 2026 at 10:37 PM
Bridging Theory and Practice: Cybersecurity Careers, CTFs, Bug Bounty, and AI Security Realities + Video

Introduction: Modern cybersecurity education demands a paradigm shift from passive textbook reading to active, hands-on engagement with real-world targets. Recent insights from academic and…
Bridging Theory and Practice: Cybersecurity Careers, CTFs, Bug Bounty, and AI Security Realities + Video
Introduction: Modern cybersecurity education demands a paradigm shift from passive textbook reading to active, hands-on engagement with real-world targets. Recent insights from academic and industry discussions at institutions like ISIMS emphasize that aspiring security professionals must navigate career pathways by leveraging capture-the-flag (CTF) competitions, structured web security labs, and understanding emerging AI security challenges such as prompt injection. Mastering these domains requires combining foundational theory with rigorous, practical application.
undercodetesting.com
October 22, 2026 at 10:37 PM
Her Majesty’s Social Security
October 22, 2026 at 10:37 PM
💥💥BO0M💥💥

"Judge Orders Trump to End Election Probe Based on Error-Filled Data"

This is HUGE!!
9 States impacted.

l.smartnews.com/p-8JAwAeS5/Z...
Judge Orders Trump to End Election Probe Based on Error-Filled Data (The New Republic)
A judge has ordered the Department of Homeland Security to end its investigations into noncitizen voting in nine states. U.S. District Judge Araceli Martínez...
l.smartnews.com
October 22, 2026 at 10:37 PM
He is putting his finger on it: russia has no interest in its own security; it's just looking for the best opportunity for its next fight.

Having no true interest in security, it must feel quite weird to see Zelenski express concern for that. Ukrainians do want justice and NATO might restrain them
October 22, 2026 at 10:37 PM
I get your point…but national security architecture should not be within the command and control of a private individual (even a sane one, not the case today). The core issue is the GOP’s abdication of they oversight responsibilities. Bottom line, the problem is (as always) governance.
October 22, 2026 at 10:36 PM
Social Security Admin?
October 22, 2026 at 10:36 PM
He can’t pass a security clearance check. He should have no hand in our National Security at all.
WATCH — @ronaldfilipkowski on Elon Musk: "How did we allow a private individual to have this much power over the world? The next administration needs to divest itself and decouple itself from all things Musk. Correct. Get him out of the business of the U.S. government."
October 22, 2026 at 10:36 PM
🚨 Major U.S. banks are spotting rogue AI agents accessing customer accounts and making moves users never approved. AI security is becoming a serious concern!
October 22, 2026 at 10:36 PM
Public Citizen just launched an investigation under the FOIA to demand any and all communications about #NoKings blackout between Meta and Trump’s Department of Homeland Security.
October 22, 2026 at 10:36 PM
Show HN: Replacing CAPTCHAs with adaptive proof-of-work in WordPress
Discussion | hackernews | Author: MatthiasNordwig

#Security
Show HN: Replacing CAPTCHAs with adaptive proof-of-work in WordPress
Invisible spam protection for every form, login and checkout. No puzzles, no checkboxes, no lost visitors — a CAPTCHA your users never see.
wordpress.org
October 22, 2026 at 10:36 PM
Learn more about @ForwardNetworks and Security Field Day #XFD16 on our website:
🌐 Event Page: techfieldday.com/appearance/f...

@TechFieldDay.com @NetworkingNerd.net #XFD16 #Cybersecurity #AISecurity
Forward Presents at Security Field Day 16 - Tech Field Day
techfieldday.com
October 22, 2026 at 10:36 PM
Security Field Day #XFD16 📅 October 28 - 30, 2026 🔐

Tune in 🔴 LIVE on Thursday, October 29 at 3:30 PM to see #ForwardNetworks present.

▶️ YouTube: www.youtube.com/@techfieldday
🔹 Linkedin: www.linkedin.com/company/tech...

@TechFieldDay.com @NetworkingNerd.net #XFD16 #Cybersecurity #AISecurity
October 22, 2026 at 10:36 PM