Search results for CISA
AI & Enterprise
Hackers tried to exploit PHP flaws four days before patch, could be Log4Shell-scale
Hackers began searching for vulnerable servers and attempting attacks four days before patches for two critical PHP flaws were released, SecurityWeek reported on Oct. 22 citing Amazon. The flaws, known as PHP2Shell, can be used to remotely control servers. Amazon said exploit activity accelerated after information leaked online and that PHP2Shell is now widely abused. Researchers and companies estimate millions of PHP hosts remain unpatched, and CISA urged immediate updates.
AI & Enterprise
Major PHP flaws trigger cybersecurity alerts, websites blocked across Europe
Two major security vulnerabilities have been found in PHP, prompting cybersecurity alerts in multiple countries. In Europe, some government agencies, hospitals and schools have shut websites to avoid hacking. Groups overseeing PHP confirmed the flaws, and bodies including KISA, CISA, the UK NCSC and the EU’s CERT-EU urged updates and warned of risk. The affected versions include several PHP 8.x releases and all unsupported versions below PHP 8.1.
Telecommunications & Media
Senior scams exploit combined personal data, target family group chats
Online scams targeting older people in the United States are rising rapidly, prompting warnings about family impersonation and account takeovers using publicly available personal information. An Incogni analysis cited by 9to5Mac found about 72 percent of 2024 internet crimes reported to the FBI involving people aged 60 and older fell into categories where exposed personal data could enable crimes or worsen harm. Estimated losses were $4.2 billion, versus the FBI’s total of $4.885 billion.
-
AI & Enterprise
Jensen Huang says using others\' AI models is competition, clashing with U.S. view of theft
-
AI & Enterprise
Five things you should never entrust to ChatGPT
-
AI & Enterprise
Korean police warn of Gunra ransomware spread, issue joint South Korea-U.S. cybersecurity advisory
-
AI & Enterprise
White House to launch \'GoldEagle\' framework to tackle critical infrastructure vulnerabilities
-
AI & Enterprise
Countries scramble to fortify AI security strategies, with geopolitical clashes too
-
AI & Enterprise
U.S. CISA uses Anthropic Mythos to audit government software
-
AI & Enterprise
Cybersecurity race intensifies in AI era; defense automation seen as answer
-
AI & Enterprise
15th Information Security Day ceremony highlights safe AI era
-
Crypto
Trump signs quantum computing executive orders, urges deployment by 2028
-
AI & Enterprise
KISA begins testing OpenAI\'s GPT-5.5 Cyber as Mythos access nears
-
AI & Enterprise
U.S. government cuts deadline to 3 days for most critical cyber flaws amid AI attacks
-
AI & Enterprise
No time to respond to ultra-fast AI attacks, \'patch gap\' alarm
-
AI & Enterprise
South Korea\'s ICT ministry eyes access to Anthropic\'s Mythos
-
Games & Commerce
18-year-old Excel bug still used in attacks, warning for legacy Office users
-
AI & Enterprise
Predictive security models hit limits as shadow AI SaaS risks rise