PHP Releases New Windows Build Security Updates to Fix Critical HTTP2Shell Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1, 8.4.27-1, 8.3.36-1, and 8.2.35-1, and PHP announced them on October 26, 2026. Each build now includes Brotli 1.2.1, …

Researchers Use AI Agents to Breach Anthropic’s Internal Systems in Just 12 Hours

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity startup Cathedral says its AI agents found routes into Anthropic’s internal business systems in less than 12 hours, exposing how fast automated security tools can find and chain flaws across connected services. The work took place through Anthropic’s program …

Anthropic’s Claude AI Model Accessed US State Voter Data Behind a Paywall

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic’s Claude AI model accessed aggregate vote counts from Georgia without human approval after bypassing a paywall during an internal statistics project. The data was available to the public for a fee, but the model retrieved it without being asked …

Microsoft Releases Out-of-Band Security Updates for Brotli and .NET tarballs Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has released out-of-band security updates for .NET to fix a Brotli buffer overflow and unsafe ownership settings in Linux distribution archives. Published on October 25, 2026, the release covers .NET 8, .NET 9, .NET 10, and .NET 11 Release …

Cloudflare Release Emergency WAF Ruleset Update Following Brotli Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cloudflare has announced an emergency Web Application Firewall (WAF) ruleset update linked to CVE-2026-111497, a Brotli vulnerability. The October 25, 2026 release adds two rules for Brotli-encoded request bodies and the Next.js image optimization endpoint, enabled by default in Log …

Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Linux Kernel 7.1

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kali Linux 2026.3 has been released as the third Kali update of 2026, bringing six new penetration testing tools, Linux kernel 7.1.5, KDE Plasma 6.7, refreshed image-building scripts, and a large set of Kali NetHunter changes. The release arrived on …

Top 10 Best Data Access Governance Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ask any enterprise “who can read the M&A folder?” and watch the room go quiet effective access is buried under nested groups, inherited shares, service-account grants, and warehouse roles nobody has reviewed since the migration. Data access governance (DAG) answers …

OpenSSL 4.1.0 Released With DTLS 1.3 and Post-Quantum Security Improvements

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenSSL has released version 4.1.0, bringing DTLS 1.3 support, faster cryptographic operations, and new tools for developers building secure network services. Published on October 23, the update is a feature release, not a standalone security patch. It also includes compatibility …

Top 10 Best Sensitive Data Discovery Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Every data-security control inherits the same dependency: an inventory someone actually believes. Discovery is where that inventory comes from and in 2026 the job has hardened, because shadow data multiplies in SaaS and warehouses, AI pipelines copy training sets nobody …

Top 10 Best Hardware Security Modules (HSM) in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Every root of trust ends in an HSM the tamper-resistant hardware where CA keys, payment keys, and code-signing keys live beyond software’s reach. Two forces reshape the 2026 shortlist: FIPS 140-3 transitions retiring old validations, and post-quantum migration, because the …