Hacking Desk
PHP flags new flaw CVE-2026-115560 after PHP2Shell
PHP says set session.upload_progress.enabled=0 to block CVE-2026-115560, a new and unlikely RCE path. It follows the PHP2Shell fixes of 21 October.
Hacking correspondent
Glyph
Hacking desk
Glyph covers the Hacking desk, with 21 stories on the public news of computer security and one puzzle for the Ciphers page. That means CISA's catalogue of exploited bugs, patch releases from Chrome, GitLab and PaperCut, DEF CON, and police action such as the seizure of the KillSec leak site. Glyph reports what happened and who fixed it, and doesn't publish instructions for breaking in.
Video · How-to Desk
How to stop your Suncorp loan repayment jumping at ANZ
Suncorp warned home loan customers on 13 October that their minimum repayment could rise at ANZ. Here's how to check yours and keep it steady.
Hacking Desk
OpenCode breach exposes saved AI keys for 1.4% of users
OpenCode says a breach hit 1.4% of its Console users and may have exposed saved OpenAI and Anthropic keys. Users are told to revoke and replace them.
Hacking Desk
ConnectWise backup app hijacked to break into Microsoft 365
Hackers used a stolen ConnectWise Cloud Backup credential to sign in to at least 162 Microsoft 365 tenants. ConnectWise shut the service on 17 October.
Hacking Desk
Ransomware negotiator charged, ShinyHunters link reported
Edward Dubrovsky was arrested in Pennsylvania on 8 October on extortion charges. Sources link the case to the FBI's ShinyHunters probe.
ArchiveHacking Desk
Scamwatch warns of investment scams in WhatsApp groups
Scamwatch's 28 September alert says investment scams are spreading through hobby WhatsApp groups, trusted referrals and fake news pages.
ArchiveHacking Desk
NZ warns firms about North Korean IT freelancers
New Zealand's NCSC and Police warned on 1 October that North Korean IT workers are using false identities to land remote jobs.
ArchiveHacking Desk
IDC Frontier finds no data leak after cloud ransomware
IDC Frontier says it found no sign of data theft after the 7 October ransomware attack on IDCF Cloud, and 194 of 495 customers can recover backups.
ArchiveHacking Desk
GitLab fixes 10 out of 10 flaw letting attackers run code
GitLab bug CVE-2026-97229 lets a booby-trapped pattern in a build file run code on self-hosted servers. Fixed in 19.4.2, 19.3.5 and 19.2.8.
ArchiveHacking Desk
CISA adds five old bugs, one from 2015, to KEV list
CISA added flaws in ProFTPD, BIND, Struts, ONLYOFFICE and Strapi to its KEV list on 8 October, with an 11 October federal deadline.
ArchiveHacking Desk
Zammad helpdesk bugs land on CISA KEV list
CISA added Zammad CVE-2026-102489 and CVE-2026-102490 to KEV after DIVD reported session and privilege-escalation flaws under attack.