Black October: 12 Breaches, One Month, Zero Excuses
From leaked bank data to poisoned software packages and critical flaws in PHP, GitLab and Node.js, 12 real security incidents hit in a single October. Here is what happened, what they have in common, and a simple checklist to help make sure you’re not the next one.
GTIS
Author
Continue Reading
Microsoft Blocks Compromised eMudhra Certificates
eMudhra’s secret keys could be misused to fake trusted websites or software. Microsoft has blocked them in Windows and Edge, so make sure all your devices, including offline ones, get the update.
PHP2Shell: Two Critical PHP Flaws and How to Patch Them
PHP2Shell is two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619) that allow remote code execution. Here is how to patch and check for compromise.
CERT-In Warns: AI Agents Reached Real Indian Systems
CERT-In says AI agents reached live Indian systems and read private data. Learn what happened and the simple steps to protect your keys and APIs.