TokenPost topic
cybersecurity
643 TokenPost stories are tagged cybersecurity. The newest appear first.
Latest cybersecurity stories
- Cybersecurity Stocks Jump as PHP Warning and AI Trade Draw Focus
HACK gained 3.2% and CIBR rose 2.7% Wednesday. Palo Alto Networks, CrowdStrike and Zscaler also posted gains.
· Investing
- SentinelOne Opens AI Agent Security Product to Early Access
Singularity Agentic Detection and Response is designed to find AI agents, govern their activity and detect or stop unintended or malicious actions.
· Technology
- Trust Wallet Says Its Apps Are Unaffected by Critical PHP Flaws
The vulnerabilities can enable unauthenticated remote code execution on vulnerable web servers; fixed PHP releases were issued Oct. 21.
· Technology
- Bill Gates Sees About 20 Years for AI’s Broader Economic Shift
Gates forecast significant negative effects on the job market and from cyberattacks within two to three years, while saying the broader transition could take less or more time.
· People
- Attackers Used AI Agents in Crypto Scams and Health Care Intrusions
Recovered sessions show how authorization claims could steer coding tools. A separate lab evaluation bypassed safeguards in 120 controlled scenarios, not a measure of real-world success.
· Technology
- CrowdStrike Introduces Falcon Guardian to Monitor AI Agents
The product includes agent discovery, runtime visibility and access controls. Its AI gateway was in pre-beta, with general availability planned for Q4.
· Technology
- Amazon Honeypot Detected PHP Exploit Attempts Before Public Disclosure
The flaws affect PHP 7.x and 8.x and can enable remote code execution without authentication.
· Technology
- PHP Flaws Targeted Before Disclosure, 22.6 Million Exposed Instances
Hackers attempted exploitation Oct. 17, four days before the flaws became public. The vulnerabilities may affect about 70% of the internet.
· Technology
- Railway Urges Its Users to Replace Potentially Exposed Google Cloud Keys
The platform urged customers to disable suspect keys, replace credentials, redeploy services and check cloud logs and billing for unauthorized activity.
· Technology
- Two Japanese Games End Service After Critical PHP Flaws Prompt Closures
World Quest cited an aging architecture, while the operator of 僕の魔界を救って！ said its old server and PHP setup was difficult to secure and impractical to migrate.
· Technology
- Sakura Internet Suspends Three Database Tools After PHP Flaws
The suspension affects its Database Appliance, not its separate Database Cluster. Sakura set no restoration date and recommended compatible SQL clients.
· Technology
- OANDA Securities Delays Some Withdrawals After Hosting Security Incident
Processing of affected requests is scheduled to begin at 10 p.m. ET Oct. 22 (Oct. 23, 0200 UTC). A total of 26,739 servers may have been affected.
· Technology
- Binance Adds Safeguards After Disclosure of Two Critical PHP Flaws
PHP released fixes for both vulnerabilities Oct. 21. Binance is monitoring developments and continuing to strengthen its platform protections.
· Technology
- OpenAI Codex Reset Was Scheduled Before 1 p.m. ET Thursday
Codex lead Tibo urged users to request Daybreak Blue access in case a security incident occurs. The application takes about 15 minutes.
· Technology
- South Korea Holds Emergency Cybersecurity Meeting on PHP Flaw
The National Security Office focused its emergency session on a PHP vulnerability with broader implications for organizations running widely used web infrastructure.
· Technology
- Railway Freezes Deployments, Orders Users to Rotate Keys
Some customer environment variables may have been exposed. Railway was restoring deployments by plan tier as it investigated.
· Technology
- South Korea Raises Cybersecurity Alert Over a PHP Vulnerability
The alert concerns a vulnerability in PHP.
· Technology
- CZ Says Attackers Exploited Critical PHP Flaws Used by Websites
PHP fixed the two vulnerabilities Oct. 21, but some site administrators may not have applied the patches.
· Technology
- Cloudflare Sees Millions of PHP Exploit Attempts After Disclosure
Attempts rose from thousands before disclosure to hundreds of thousands within two hours; some government websites in Europe and other regions went offline.
· Technology
- PHP Vulnerability Draws Millions of Exploitation Attempts
Cloudflare CEO Matthew Prince described a sharp rise in attempts after disclosure. Some government websites in Europe and other regions went offline during protective measures.
· Technology
- PHP Releases Fixes for Two Critical Flaws as Cloudflare Adds WAF Protections
The fixes cover PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. PHP 8.1 and older no longer receive project updates.
· Technology
- Microsoft Ties China-Linked Hackers to AI-Driven ConnectWise Breach
The campaign included attempts to access more than 2,250 Microsoft 365 tenants and targeted hundreds of organizations worldwide.
· Technology
- South Korean IT and Cybersecurity Sectors Respond to Severe PHP Flaw
About 110,000 internet assets may run affected PHP versions, placing South Korea sixth worldwide for potential exposure. No reported intrusions or suspected victim cases had been identified.
· Technology
- CyberCX Executive Warns AI May Cut Response Time From Several Weeks to Several Hours
Dimitri Vedeneev pointed to the exposure of a PHP vulnerability as an example of AI quickly revealing weaknesses in widely used technology.
· Technology
- Lightning Labs CTO Urges Updates to Four Node Software Packages
The recommendation covers lnd, btcd, tapd and litd, with rebuilding on Go 1.27.3 offered as an alternative.
· Technology
- PHP2Shell Flaws Prompt Website Shutdowns Across Multiple Countries
The PHP vulnerabilities score 9.2 out of 10 under CVSS v4, while visitors do not need a special update for their phones or computers.
· Technology
- Haseeb Qureshi Says Crypto Hacks May Signal Wider Cyberattack Wave
He said hack counts have climbed sharply even as annualized theft remains near 2025 levels, pointing to lower average losses per attack.
· Technology
- Google Chrome 156 Fixes 353 Security Flaws, Including Six Critical Bugs
Anthropic researcher Xinyang Ge reported five vulnerabilities with Claude’s help, and OpenAI Codex Security reported four.
· Technology
- Vitalik Buterin Says Cybersecurity Can Shift Toward Defenders
He said the difficult transition will require deeper changes, including formal verification and reducing the trusted computing base.
· Technology
- CZ Warns of Active Exploitation of Two PHP Vulnerabilities
The flaws may affect servers running WordPress and Magento. Patches were released Oct. 21, and IT teams are deploying firewalls and updates.
· Technology
- PHP Patches Critical RCE Flaws After Government Sites Go Offline
The two flaws each scored 9.2 on the CVSS 4.0 severity scale. Some Wikipedia services also went offline.
· Technology
- PHP Pulls Critical Fix Release Forward After Vulnerability IDs Surface
A proof-of-concept video appeared Oct. 20, while patched container images surfaced more than six hours before the coordinated release.
· Technology
- PHP Security Flaws Prompt Urgent Patch Alert for Crypto Platforms
Two vulnerabilities carry 9.2 scores under CVSS v4.0. PHP released security patches for several versions on Oct. 21.
· Technology
- Railway Pauses Deployments After Possible Customer Credential Exposure
Railway’s preliminary review indicated an unauthorized party may have accessed encrypted environment variables and obtained decrypted contents from some.
· Technology
- National Security Agency Urges Offline PHP Systems If Updates Aren’t Feasible
Two flaws can enable unauthenticated remote code execution. Cloudflare customers using its WAF had protections active nearly 11 hours before PHP’s scheduled release.
· Technology
- OpenAI Urges Congress to Fund CISA-Led AI Cyber Defense Plan
The proposal outlines a five-year implementation plan covering federal, state, local, tribal and territorial networks, with hospitals, schools and water systems among its priorities.
· Regulation
- Storm-0940 Tried to Access More Than 2,250 Microsoft 365 Tenants
The group used compromised ConnectWise Cloud Backup application credentials. Activity in multiple customer environments went beyond attempted sign-ins.
· Technology
- Cloudflare Sees Attack Traffic Targeting Critical PHP Flaws
PHP released fixes for two critical flaws on Oct. 21. Cloudflare enabled default firewall protections for affected customers before the release.
· Technology
- Alibaba’s Qwen3-Coder Produced More Hackable Apps for a U.S. Prompt
The main comparison found a 70% hackability rate for U.S. defense-contractor apps and 59% for Chinese-contractor apps. The tests targeted running applications, not deployed software.
· Technology
- Anthropic Extends Claude Security to Track Code Changes and Fixes
Projects can connect up to eight repositories. Eligible Claude Enterprise organizations can receive monthly usage credits.
· Technology