TokenPost topic
cybersecurity
643 TokenPost stories are tagged cybersecurity. The newest appear first.
Latest cybersecurity stories
- Calif and Wiz Used AI in Separate Discoveries of Critical PHP Flaws
Calif identified one vulnerability, while Wiz found both. PHP released four patched versions Oct. 21.
· Technology
- Patch the Planet Dashboard Lists 1,995 Issues Across 68 Codebases
The Oct. 21 snapshot also showed 679 patches written and 466 accepted upstream.
· Technology
- PHP, Node.js and Go Patch RCE, TLS and Certificate Trust Flaws
PHP and Node.js issued updates Oct. 21. Go announced its patched versions Oct. 19, and its vulnerability advisory appeared Oct. 21.
· Technology
- Eclair Urges Its Software Operators to Upgrade After Security Warning
Version 0.14.5 warns that malicious nodes could exploit some fixed issues. Operators can install the update without closing existing payment channels.
· Technology
- Node.js Fixes High-Severity Flaws Across Three Release Branches
The Oct. 21 updates address 10 vulnerabilities, including a Brotli decoder flaw that can enable remote code execution.
· Technology
- PHP Fixes Two Critical Flaws That Put Web Servers at Risk
The bugs could let unauthenticated attackers run code on vulnerable servers. PHP released fixes in four versions, while attack traffic was observed before public disclosure.
· Technology
- U.S. Government Learned of PHP Vulnerability on Oct. 16
Federal agencies are assessing possible effects on government systems and critical infrastructure while coordinating patch work and mitigation priorities.
· Technology
- OpenAI’s GPT-5.6 Sol Helps Find Two Critical Flaws in PHP
PHP maintainers issued fixed releases, while OpenAI pledged $1 billion in subsidized Daybreak access for frontline defenders.
· Technology
- OpenAI Pledges $1 Billion for Cybersecurity Support After PHP Flaw Discovery
The Daybreak project will provide grants to front-line cybersecurity defenders and support their use of related services.
· Technology
- PHP Patches Two Critical Flaws as OpenAI Codex Security Gets Credit
The bugs allow unauthenticated remote code execution. Fixes are available in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
· Technology
- Google Says Its Cloud Platform Is Unaffected by Two PHP Flaws
Users running PHP apps on Google Cloud may still face risk. Gemini 4 Argon helped identify the flaws, develop exploits, detect attacks and verify patches.
· Technology
- PHP Releases Security Fixes After Government Websites Go Offline
Two serious flaws prompted precautionary shutdowns in the Netherlands and Finland before patched versions became available.
· Technology
- PHP Patches Two Security Flaws After Dutch, Finnish Agencies Shut Sites
The shutdowns came before the patched software was available, with affected Dutch sites spanning government, politics, health care and port infrastructure.
· Technology
- CrowdStrike Plans NVIDIA Hardware Controls for AI Agents
Falcon Guardian’s OpenShell integration is underway. A separate connection to Sentry would add monitoring and enforcement through BlueField-4 hardware.
· Technology
- OpenAI’s 50-Petabyte Agent Review Exposes an Evidence Search Challenge
As of Sept. 30, the review used about 7,000 GPUs and cost more than $500,000 a day. Separate October tests showed agents interfering with monitoring safeguards.
· Technology
- Operators Urged to Limit Exposure Ahead of Scheduled PHP Fixes
Security advisories called for restricting exposed services and preparing to install patches immediately.
· Technology
- AI Agents Assigned 1,100-Plus Website Attack Projects, Including Commerce Sites
The project count does not represent confirmed breaches. One completed project contained a web shell, while another panel group was likely tied to credit-card and cryptocurrency tasks.
· Technology
- PHP Flaws Could Let Attackers Take Control of Web Servers
The planned emergency patch release was moved to 10 a.m. ET (14:00 UTC) Oct. 21 after details surfaced online the day before.
· Technology
- Chrome and Firefox Block eMudhra Certificates Over Fake-Site Risk
Eight intermediate certificates had weak private keys that could be used to forge HTTPS credentials. Software outside browsers may still need updates.
· Technology
- Two Critical PHP Flaws Raise Security Concerns for Crypto Platforms
Each flaw carries a 9.2 severity score, and official patches were pending on Oct. 21.
· Technology
- SlowMist Flags PHP Risk in Crypto Systems Ahead of Critical Fixes
Two PHP flaws each carry a 9.2 severity score. A security update is expected at 10 a.m. ET (14:00 UTC) on Oct. 21.
· Technology
- PHP Plans Fixes for Two Critical Flaws That Could Allow Remote Code Execution
Both flaws carry a 9.2 severity rating. PHP has scheduled a security release for 10 a.m. ET (14:00 UTC) on Oct. 21.
· Technology
- PHP Schedules Security Update for Two Critical Vulnerabilities
Crypto security firm SlowMist urged teams using PHP to check their servers and prepare to upgrade after the fix is released.
· Technology
- FSB Secretary General Warns AI Provider Concentration Could Disrupt Firms
The board issued 12 flexible AI practices on Oct. 15 and is seeking feedback on eight principles to modernize financial regulation by Jan. 8, 2027.
· Regulation
- OpenCode Co-Founder Says AI Models Refused Amid Further Attacks
Dax Raad said access to OpenAI’s Daybreak Blue program improved the response. He did not identify the models or say whether the refusals occurred during the Console intrusion investigation.
· Technology
- PingCAP Intrusion Exposes TiDB Cloud Account and Billing Records
The intruder also copied source code. Investigators have found no evidence that data stored in TiDB was affected.
· Technology
- Aleksander Madry Plans OpenAI Return to Focus on AI Safety
The former Preparedness team leader will work with Chief Scientist Jakub Pachocki as OpenAI examines cybersecurity risks from advanced models.
· People
- Dell Security Chief Says AI Is Lowering Barriers to Cyberattacks
A review of 832 banned accounts found that 560 used AI to write malware and 54 used it to move through compromised networks.
· Technology
- Bitget Says TiDB Cloud Intrusion Exposed Only Public Trade Logs
The exchange said it stopped using the database service more than two months ago. Its review found no exposure of user data or passwords.
· Technology
- Bitget Says It Stored No Sensitive Business Data on Breached TiDB Cloud
The exchange says it kept only public data on the service and stopped using it more than two months ago.
· Technology
- Hackers Claim 10.6 TB TiDB Cloud Theft Involving Bitget Records
FulcrumSec says the haul spans 4.9 million files and includes customer API keys and database logs. Bitget says it stored only public trade logs on the service.
· Technology
- Maximus Agrees to Buy Agile Defense for $660 Million Base Price
The agreement also covers certain affiliates and allows for price adjustments and additional payments tied to performance targets.
· Business
- Thoma Bravo’s Seth Boro Warns AI Agent Security Risks Will Persist
Coinbase wallets let AI agents spend and trade crypto, making controls on their actions relevant to users.
· Technology
- Exposed Cairn Panels Reveal Hundreds of Secrets, 11% Verified Valid
More than 20 panels appeared tied to malicious activity, including a 14-panel cluster with more than 1,100 attack projects.
· Technology
- Block Raises Security Alert Triage Throughput 50% With Daybreak
Block estimates the workflow completes investigation work equivalent to about 1,100 analyst-hours each quarter. Employees remain responsible for validating findings and deploying code changes.
· Technology
- Axonius Introduces AI Workforce With More Than 50 Security Worker Types
The AI Companion and MCP Server are generally available, and the three products share a data model covering more than 80 asset and exposure types.
· Technology
- Bybit-Founded Alliance and UNDP Sign Two-Year Cybersecurity Deal
The partners plan to train public institutions on data protection, secure digital payments and the security of public digital services.
· Business
- JPMorganChase Tops $230 Billion in Security Initiative Transactions
The bank also committed $5 billion in equity investments, half of the initiative’s initial $10 billion equity allocation.
· Business
- AI Agents Gain Access to Websites of More Than 100 Companies
A separate Cairn operation instructed agents to steal cryptocurrency. The largest cluster logged more than 1,100 projects across 14 panels.
· Technology
- One Q3 Crypto Security Tally Put Losses at $1.28 Billion
The tally counted 268 incidents and listed adjusted losses of $877.8 million; other Q3 estimates were lower.
· Technology