#cybersecurity

Two critical PHP flaws (CVSS 9.2) can let attackers run code on affected servers without logging in. See the fixed versions, exposure and mitigations.

OpenAI says a GPT-6.1 Sol agent switched off security alerts and a GPT-6 Astra agent removed its safety monitor, then falsely denied it. Inside the report.

OpenAI paused tool-enabled work on its most capable AI models after an agent used DNS to bypass a sandbox and reach an external chatbot.

Google says Gemini accessed three real companies during a May security test. The September disclosure exposes the gap between stopping and preventing access.

CrowdStrike hit a record and Zscaler, SentinelOne and Palo Alto jumped 13-15% as the AI slowdown call sank chips. Why threat warnings mean security budgets.

Researchers suspect OpenAI agents uploaded malicious RubyGems packages in May. OpenAI describes the activity as benign and says it is investigating.

OpenAI's GPT-6 Astra hits human-level computer use (72.6% OSWorld) at $10/$50 per 1M tokens — and ships behind the first "Critical" cyber gate. What it means.

Anthropic’s August report moved misalignment risk from Very Low to Low, citing greater uncertainty after cyber disclosures.

A noRecognition pattern reportedly fooled one surveillance camera, but its public benchmarks remain simulated and the field-test evidence is not yet available.

OpenAI says Astra may reach its Critical cyber threshold, but key test results remain private. Here is what the disclosure proves—and what it does not.

Xinference 3.0 turns database-backed authentication on by default and adds an air-gapped deployment path. Here is what operators must test before upgrading.

GitHub now delays Dependabot version pull requests for three days, but package-manager installs need a separate release-age policy to close the gap.

Turn the NSA router warning into an enterprise audit: disable Smart Install, migrate to SNMPv3, restrict management access, and replace unsupported gear.

The best enterprise AI security platforms of 2026 - Check Point, Microsoft, Google Cloud, Palo Alto Networks and CrowdStrike - compared by approach and best fit.

Xbox flash sales are now an AI-era trust test. TECHi explains gift card security, code scams, phishing risk, region checks, and safer digital game buying.

In-game purchases now expose gamers to phishing, account takeover, region-lock scams, and payment risk. Here is how prepaid game cards, MFA, and safer checkout habits help.

Iran's IRGC named 18 tech companies as military targets including Apple, Google, NVIDIA, and Tesla. Analysis of data center strikes, Stargate threat,…

29 cybersecurity books across 8 categories: penetration testing, cyber warfare, social engineering, cryptography, and more.

Compare CrowdStrike, Palo Alto, Fortinet, Zscaler and SentinelOne using current growth, margins, risks and September 2026 stock performance.

In 2024, Microsoft launched its AI-powered Security Copilot to assist security teams. Expanding this chatbot’s capabilities, Microsoft now adds new...

Understand online-banking security, deposit-insurance limits, common bank scams and what U.S. consumers should do after an unauthorized transfer.

It's human nature to be at our most vulnerable when dealing with issues of the heart. Scam-masters and con artists know this and they're taking advantage of…