Tag

cybersecurity

18 stories

PHP2Shell and the PHP scare that nearly stopped the web

On Wednesday, a pair of long-dormant vulnerabilities in PHP sparked an emergency scramble across the internet. The bugs—dubbed PHP2Shell and assigned CVE‑2026‑109618 and CVE‑2026‑109619—allow unauthenticated remote code execution on affected systems. Once researchers demonstrated exploitability, vendors and web hosts rushed to apply patches released by the PHP Foundation, while companies and governments warned users and some organizations temporarily took services offline to protect themselves. What happened Security researchers at Calif…

Saugata DattaOct 24, 20264 min read50

Cybersecurity

WhatsApp’s New SIM Rule: What India’s 2027 Requirement Means for Users

WhatsApp users in India are facing a potential change that could alter how accounts work on secondary devices. Under new directions from the Department of Telecommunications (DoT) tied to the Telecom Cyber Security Rules, messaging services may be required to keep an ongoing link between an account and the SIM card registered to that number. With an expected implementation window beginning January 1, 2027, and a compliance deadline of December…

Saugata DattaOct 24, 20264 min read73

Cybersecurity

PwC Faces Data-Extortion Claim: What We Know and What Organizations Should Do

The Everest ransomware group has publicly claimed to have stolen roughly 590.69 GB of data from PwC, alleging that the haul includes HR records, training materials and internal documents. At the time of the claim the details were unverified and PwC had not issued a public response; the listing appeared on Everest’s leak site on October 22, 2026. This post lays out the factual elements reported so far, what the…

Saugata DattaOct 23, 20264 min read98

Cybersecurity

Global websites taken offline after critical PHP vulnerability forces emergency patches

Websites around the world went dark this week after security researchers uncovered a serious flaw in PHP, the programming language that underpins roughly 70% of the web. Governments and organisations ordered precautionary takedowns while a patch was released, but experts warned that a long tail of unmaintained sites could remain vulnerable for weeks or months — creating a persistent window for exploitation. What happened Researchers reported a critical vulnerability in…

Saugata DattaOct 22, 20264 min read110

Cloud Computing

Microsoft Extends Windows 10 Extended Security Updates Through October 2027

Microsoft has quietly extended its consumer Extended Security Updates (ESU) program for Windows 10, pushing the cutoff for critical security patches out another year to October 12, 2027. The move gives millions of users who have not yet migrated to Windows 11 additional time to receive important and critical security fixes, while Microsoft continues to encourage upgrades to the newer OS. For those already enrolled in the consumer ESU program,…

Saugata DattaJun 26, 20263 min read205

Artificial Intelligence

Let’s Encrypt Temporarily Halts Certificate Issuance Following Root Incident

On May 8, 2026, Let’s Encrypt, the widely used non-profit certificate authority, took the drastic step of temporarily suspending all certificate issuance. The move came after engineers discovered a critical issue involving a cross-signed certificate that linked the organization’s current Generation X root to its upcoming Generation Y root infrastructure. This preventive measure resulted in a complete shutdown of services across both production and staging environments for several hours. Restoring…

Saugata DattaMay 9, 20262 min read211

Artificial Intelligence

OpenAI’s GPT-5.4-Cyber: a practical boost for defenders — and a new risk calculus

OpenAI has introduced GPT-5.4-Cyber, a purpose-built variant of GPT-5.4 tuned to assist vetted security professionals with tasks previously reserved for specialized analysts. Rather than a general consumer release, this model is designed to lower refusal rates for legitimate cybersecurity workflows: binary reverse engineering, vulnerability scanning, malware analysis and exploit research. The announcement frames the model as a defensive accelerant — a tool to help defenders inspect compiled software and evaluate…

Saugata DattaApr 15, 20264 min read361

Artificial Intelligence

OpenAI Revokes macOS App Certificate After Axios Supply-Chain Compromise

OpenAI has publicly disclosed a supply‑chain incident that affected the signing workflow for its macOS applications and, out of caution, is revoking and rotating the certificate used to notarize those apps. The company’s investigation found that a GitHub Actions workflow used in the macOS signing process pulled a compromised release of the widely used npm library Axios (version 1.14.1). Although OpenAI reports no evidence of user-data exfiltration or system compromise,…

Saugata DattaApr 13, 20265 min read359

Artificial Intelligence

Anthropic Withholds Mythos Preview: Too Potent a Cyber Threat to Release

Anthropic’s decision to withhold the Claude Mythos Preview has punctured the usual celebratory arc of model announcements. Rather than rushing to commercialize another frontier AI, the company says Mythos demonstrated capabilities that could be exploited to find and chain high-severity vulnerabilities in widely used systems—so serious that Anthropic is choosing limited, defensive deployment over general release. A startling discovery in testing In internal evaluations and red-team exercises, Mythos reportedly did…

Saugata DattaApr 8, 20264 min read559

Artificial Intelligence

Microsoft Links Medusa Ransomware Affiliate to Zero-Day Exploitation Campaign

Microsoft’s recent analysis tying a Medusa ransomware affiliate to a campaign that leveraged zero-day vulnerabilities has put a renewed spotlight on the evolving tactics of extortion groups and the threat posed by previously unknown software flaws. For security teams and executives, the announcement is a reminder that threat actors are combining rapid vulnerability exploitation with tried-and-true ransomware playbooks to increase both speed and impact. What Microsoft reported and why it…

Saugata DattaApr 6, 20264 min read402

Artificial Intelligence

Microsoft strips EXIF metadata from Teams images to protect employee privacy

On March 2026’s feature rollout, Microsoft updated Teams to automatically remove EXIF metadata from images shared in chats and channels. The change aims to prevent accidental leaks of GPS coordinates, device details, and time stamps—data that can be exploited for targeted attacks or unwanted location disclosure. The move is part of a broader push to bake privacy and security into default collaboration tools. The hidden risk in photos EXIF (Exchangeable…

Saugata DattaApr 2, 20263 min read402

AI Agents and Frameworks

AI as Tradecraft: How Threat Actors Operationalize Artificial Intelligence

Organizations are facing a subtle but powerful shift: adversaries are not inventing wholly new attacks so much as adopting artificial intelligence to make existing tradecraft faster, cheaper, and more resilient. Microsoft’s threat intelligence and other industry observers show that generative AI is being embedded across the attack lifecycle to accelerate reconnaissance, scale social engineering, and shorten the time between detection and re‑deployment. The result is a landscape where familiar threats…

Saugata DattaMar 20, 20264 min read696

Free Tools: IP, DNS, SSL