Two critical unauthenticated RCE flaws in PHP core, dubbed PHP2Shell, leaked a day early. What happened, why EOL PHP 5 and 7 installs are the real problem, and what to do now.
Read more: Another Day, Another Core RCE: Welcome to PHP2Shell (CVE-2026-109618 & CVE-2026-109619)
Two critical unauthenticated RCE flaws in PHP core, dubbed PHP2Shell, leaked a day early. What happened, why EOL PHP 5 and 7 installs are the real problem, and what to do now.
Read more: Another Day, Another Core RCE: Welcome to PHP2Shell (CVE-2026-109618 & CVE-2026-109619)
Attackers took over Danfoss refrigeration controllers in hundreds of French supermarkets and heated fridges to 50°C. What failed, which models are affected and how to protect them.
Read more: French Supermarket Fridge Hack: What Happened and How to Prevent It
Police in Japan say a couple hid a mini PC behind a hotel fridge and used the hotel Wi-Fi to send 480,000 credit card phishing emails. How the scheme worked and what it teaches.
Read more: Hidden PC in a Kobe Hotel Sent 480,000 Phishing Emails
A leaked "123456" password on a contractor's account gave an attacker access to Denmark's CPR register and 8.8 million records. What failed and how to prevent it.
Read more: Denmark CPR Breach: How "123456" Exposed 8.8 Million People
Tampered Ledger devices sold through third-party resellers carried a hidden cellular implant that sent seed phrases to attackers. Over $100 million was drained. How to check yours.
Read more: Tampered Ledger Wallets: How the Hidden Implant Steals Seed Phrases
ASCII smuggling hides invisible Unicode tag characters inside words so email filters miss them while people read normal text. How the attack works and how to stop it.
Read more: ASCII Smuggling: How Invisible Unicode Bypasses Email Filters