-
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
Source: The Hacker News Published on 2026-10-27
-
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
Source: The Hacker News Published on 2026-10-27
-
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
Source: The Hacker News Published on 2026-10-26
-
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
Source: The Hacker News Published on 2026-10-26
-
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Source: The Hacker News Published on 2026-10-26
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. “Cases
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Cybersecurity researchers are calling attention to what they say is a “recurring social engineering pattern” across hundreds of cases in which threat actors use Microsoft
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages
⚡ Weekly Recap: This2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and More
This2Shell, That2Shell, Everything2Shell. That’s pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are
- Judge continues to block Trump from cutting down trees at D.C. golf course
"The Court earlier stated, 'I am not the Lorax. I do not speak for the trees,'" U.S. District Judge Ana Reyes wrote. "The Court still does not speak for the trees. It speaks only for the rule of law."
- Jay-Z to headline 2027 Super Bowl halftime show
The NFL, Apple Music and Roc Nation announced Monday night that Jay-Z will be the featured performer for the halftime festivities on Feb. 14 at SoFi Stadium in Inglewood, California.
- Dollar General overcharged people at checkout for years, FTC says
The discount retailer routinely charges customers more at checkout than the prices it displays on shelves, price tags and ads, according to federal and state authorities.
- Video of police being called to youth soccer game draws outrage
One of the league's directors said the parents were being disruptive, but 3-year-old Nevada's mother said, "They're literally kicking him out of this place because he's good at soccer."
- 7-year-old yoga instructor sets record
Phoenix Giselle Hicks was certified as a yoga instructor before her 6th birthday. Now, the 7-year-old is in the Guinness Book of World Records as the youngest female yoga instructor. Tony Dokoupil reports.

