software providing a (network or IPC) service
PHP2Shell: How AI Models Found a Decade-Old Flaw in the Foundation of the Web: For over a decade, a flaw in the foundation of many websites went unnoticed ...
t3n.de/news/php2shell-sicherheitsluecke-php-bsi-warnung-1769356/
WIRED 13h
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched: Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four ...
wired.com/story/hackers-exploited-the-php-vulnerabilities-days-before-they-were-patched/
Key FactsPHP flaws leave European government websites offline
22 hours ago · Reading time: ~45 sec.
Summary created with AI assistance · Source: ctvnews.ca
Summary created with AI assistance · Source: ctvnews.ca
- PHP runs nearly 70 per cent of websites with an identifiable programming language and underpins WordPress, which powers about 40 per cent of all websites.
- The two flaws were rated 9.2 out of 10; CERT-EU says they enable unauthenticated remote code execution.
- Wordfence warned that standard automatic WordPress updates would not install this PHP patch.
- Calif reported the first flaw, found with OpenAI’s GPT-5.6 Sol model, on August 11; Wiz independently reported a second using AI models on August 24.
rank among the most severe vulnerabilities discovered in PHP, and arguably in software history.— Wiz (security firm) stated that the findings rank among the most severe vulnerabilities discovered in PHP, and arguably in software history.
No patch available yet: Critical PHP vulnerabilities endanger countless web servers - | Golem.de
golem.de/news/noch-kein-patch-verfuegbar-kritische-php-luecken-gefaehrden-unzaehlige-webserver-2610-214332.html
Race against internet collapse: Due to acute security vulnerabilities, millions of web servers must be sealed; some institutions are shutting down their ... Show more
The internet is having a very bad cybersecurity day: From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM ...
techcrunch.com/2026/10/21/the-internet-is-having-a-very-bad-cybersecurity-day/
Critical PHP vulnerability: Attackers can take over entire servers - | what to do now
t3n.de/news/kritische-php-luecke-angreifer-koennen-ganze-server-uebernehmen-was-jetzt-zu-tun-ist-1769272/
github.com Oct 18
GitHub - achyudh/llama.cpp: LLM inference in C/C++: LLM inference in C/C++. Contribute to achyudh/llama.cpp development by creating an account on GitHub.
github.com/achyudh/llama.cpp
F5 releases out-of-band patches for critical NGINX vulnerabilities: F5 has released out-of-band security patches to address multiple NGINX web server flaws ...
bleepingcomputer.com/news/security/f5-releases-out-of-band-patches-for-critical-nginx-vulnerabilities/
Serious security vulnerability threatens millions of websites: Blogs, online shops and news portals worldwide could become targets of attackers ...
westfalen-blatt.de/ueberregional/nachrichten/wirtschaft/gravierende-sicherheitsluecke-bedroht-millionen-webseiten-3691204
Key FactsNew PHP Flaw Threatens Millions of Websites Worldwide
21 hours ago · Reading time: ~30 sec.
Summary created with AI assistance · Source: zdfheute.de
Summary created with AI assistance · Source: zdfheute.de
- Security experts say attackers could execute code remotely without authentication and take full control of affected websites.
- The BSI rates the risk as level 3 / Orange and demands immediate countermeasures, potentially including taking servers offline.
- Mainz temporarily disabled several municipal online services, including mainz.de; offices remain reachable by telephone and email.
- PHP developers announced the security patch for Wednesday afternoon at 4 p.m.; Heise Security expects exploits within hours or one day at latest.
PSA: Patch your Plex media server before someone hacks it: A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
arstechnica.com/security/2026/10/recently-fixed-plex-media-vulnerabilities-are-being-exploited-to-install-malware/
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth: A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' ...
bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/
Microsoft: October Windows Server updates break Exchange sign-in, mail flow: Microsoft has confirmed that this month's Windows Server security updates are ...
bleepingcomputer.com/news/microsoft/microsoft-october-windows-server-updates-cause-exchange-issues/
Plex2Shell: Hackers hijack Plex server shortly after exploit disclosure: Users of the Plex Media Server urgently need to update their software ...
winfuture.de/news,162059.html
Self-hosting got tiring, so I swapped Plex and Jellyfin for this sideloaded streaming app
xda-developers.com/i-swapped-hosting-plex-and-jellyfin-for-this-sideloaded-streaming-app/
I gave Jellyfin a Kodi makeover, and my media library felt brand-new: My media center has never looked better
xda-developers.com/i-gave-jellyfin-a-kodi-makeover-and-my-media-library-felt-brand-new/
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers: Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447 ...
bleepingcomputer.com/news/security/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers/
Windows Server vNext Update: Preview version brings new security tool: How can the security of Windows Server LTSC vNext be checked more quickly? Microsoft ...
winfuture.de/news,161922.html
Low-cost Android phones ship with residential proxy malware: A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android ...
bleepingcomputer.com/news/security/low-cost-android-phones-ship-with-residential-proxy-malware/
github.com Oct 05
Release v0.6.0 · ggml-org/llama.cpp: LLM inference in C/C++. Contribute to ggml-org/llama.cpp development by creating an account on GitHub.
github.com/ggml-org/llama.cpp/releases/tag/v0.6.0
Hackers exploit critical Atlassian flaw after public PoC release: A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families ...
bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/
Nature Sep 28
Transplanted hearts adjust their biological age to that of their host: Tracking the biological age of grafted organs suggests that donor pools could be expanded ...
nature.com/articles/d41586-026-03043-w
Warlock ransomware breach SharePoint in water, telecom operator attacks: The China-linked ransomware group Warlock targeted a water utility, a telecom provider ...
bleepingcomputer.com/news/security/warlock-ransomware-breach-sharepoint-in-water-telecom-operator-attacks/
With this collection, Chemena Kamali delivers a deeply personal and emotional homage to the soul of Chloé. 🤍 From delicate early broderie anglaise work to ... Show more
Less prompt, more space for code: Pi 1.0.0 is here: Pi is an extensible AI coding agent for the terminal. Version 1.0.0 streamlines the code mode ...
heise.de/news/Coding-Agent-Pi-Mehr-Platz-im-Prompt-weniger-Ballast-11474629.html
Dell asks admins to patch max severity CSM flaws as soon as possible: Dell has patched two maximum severity vulnerabilities in the Container Storage Modules ...
bleepingcomputer.com/news/security/new-max-severity-dell-csm-flaws-give-hackers-admin-privileges/
Cosmo.ph Oct 04
People have partners, chosen families, and loved ones who show up for them—and those relationships deserve to be recognized, too 🏳️🌈
Read more below ... Show more
PhilHealth Will Soon Let You Name A Health Proxy For Medical Decisions—And Yes, That Includes LGBTQIA+ Partners
PhilHealth Will Soon Let You Name A Health Proxy For Medical Decisions—And Yes, That Includes LGBTQIA+ Partners
AI agent attack on hundreds of shops: 600,000 credit card details stolen: An attacker has targeted hundreds of online shops with AI agents, stealing data from ...
heise.de/news/Angriff-mit-KI-Agenten-auf-hunderte-Shops-600-000-Kreditkartendaten-geklaut-11464492.html
Please stop using your ISP's DNS: I am once again, asking for you to stop using your ISP's DNS servers
xda-developers.com/please-stop-using-isps-dns/
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks: The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are ...
bleepingcomputer.com/news/security/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks/
WordPress vulnerability attacked just hours after patch: WordPress released two security updates on Tuesday. The critical vulnerability from the second one is ...
heise.de/news/WordPress-Luecke-nur-Stunden-nach-Patch-attackiert-11466076.html
Red Carpet Royalty in Venice! 👑 Amal Clooney dazzled at the film festival's opening ceremony in a sculptural custom gown by Tom Ford with delicate patent ... Show more
CyberNews Sep 09
LG smart TVs may log voices and scan home devices: 216m LG smart TVs may collect viewing, location and voice-command data, researchers say ...
cybernews.com/privacy/up-to-200m-lg-smart-tvs-could-be-secretly-listening-in-on-conversations/
My Jellyfin server now streams live TV without a tuner, and I finally stopped channel surfing
xda-developers.com/jellyfin-server-streams-live-tv-tuner-finally-stopped-channel-surfing/
I ditched port forwarding for a mesh VPN, and my home network is finally secure: A mesh VPN with controlled, deliberate access control is far more secure than ...
xda-developers.com/i-ditched-port-forwarding-for-a-mesh-vpn-and-my-home-network-is-finally-secure/
CISA: Critical VMware RCE flaw now exploited by ransomware gangs: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ...
bleepingcomputer.com/news/security/cisa-critical-vmware-vcenter-rce-flaw-now-exploited-by-ransomware-gangs/
I self-host anything I want behind CGNAT, and here's how you can too: CGNAT takes your address, but it doesn't take your ability to expose self-hosted services
xda-developers.com/i-self-host-anything-i-want-behind-cgnat-and-heres-how-you-can-too/
New shooter with "total warfare" for up to 100 players: Playtest is a huge hit on Steam
pcgameshardware.de/Wardogs-Spiel-78208/News/Playtest-bei-Steam-lockt-viele-Spieler-an-1552984/
Surfshark VPN says hackers breached internal testing, proxy servers: Surfshark disclosed that hackers accessed one of its internal test servers after a ...
bleepingcomputer.com/news/security/surfshark-vpn-says-hackers-breached-internal-testing-proxy-servers/
Over 36,000 exposed Plex servers vulnerable to recent flaws: Over 36,000 Plex Media servers exposed online remain unpatched against multiple security ...
bleepingcomputer.com/news/security/over-36-000-plex-servers-unpatched-against-recently-disclosed-flaws/
32 Things Restaurant Workers Hate That Customers Do: "DON'T stay after you have finished eating. If you stay and do not order more food/drink ...
buzzfeed.com/lizmrichardson/rudest-things-restaurant-customers-do
Key FactsRestaurant Workers List 32 Rude Customer Habits
Sep 11, 2026 · Reading time: ~30 sec.
Summary created with AI assistance · Source: buzzfeed.com
Summary created with AI assistance · Source: buzzfeed.com
- Several workers criticize guests who remain after eating without ordering additional food or drinks.
- Workers warn against presenting dislikes as allergies, because this triggers extra kitchen procedures and delays.
- Contributors describe visits before opening or after closing as especially inconsiderate toward staff.
- One contribution warns against reaching for trays or plates, which could make hot food fall and cause injuries.
I stream my retro games from one machine to every device in the house, and nothing gets installed twice
xda-developers.com/stream-retro-games-from-one-machine-every-device-house-nothing-gets-installed-twice/
SAP warns of maximum severity 'OVERPASS' kernel vulnerability: SAP has addressed 20 vulnerabilities across multiple products in its September 2026 ...
bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-overpass-kernel-vulnerability/
dlvr.it Sep 07
Nitter lives to proxy another day after taking legal advice: Public instance XCancel uncancelled after X Corp's cease-and-desist campaign ...
theregister.com/personal-tech/2026/09/07/nitter-lives-to-proxy-another-day-after-taking-legal-advice/5294754
This 246TB SSD media server is built for millionaire cinephiles —Kaleidescape's newest home theater vault supports 25 simultaneous 4K streams ...
tomshardware.com/pc-components/storage/this-246tb-ssd-media-server-is-built-for-millionaire-cinephiles-kaleidescapes-newest-home-theater-vault-supports-25-simultaneous-4k-streams-stores-up-to-2-300-4k-cinematic-movies
Plex warns users to patch security vulnerabilities immediately: Plex urged users this week to update their desktop clients and media servers immediately to patch ...
bleepingcomputer.com/news/security/plex-warns-users-to-patch-security-vulnerabilities-immediately/
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks: Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a ...
bleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks/
I put every Docker container behind one reverse proxy, and adding a new service takes 30 seconds
xda-developers.com/every-docker-container-behind-reverse-proxy-adding-service-takes-seconds/
Mullvad: Public DoH servers to be shut down: Mullvad is shutting down its public, encrypted DNS servers (DNS over HTTPS / DoH). The company had provided the ...
stadt-bremerhaven.de/mullvad-oeffentliche-doh-server-werden-eingestellt/
Hackers target Microsoft SharePoint RCE chain with PoC exploit: Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow ...
bleepingcomputer.com/news/security/hackers-target-microsoft-sharepoint-rce-chain-with-poc-exploit/
Mailbox threat: Almost 22,000 Exchange servers still unpatched: Around 22,000 Microsoft Exchange servers remain unprotected against a serious security ...
winfuture.de/news,161017.html
FBI disrupts proxy network enabling Chinese espionage operations: The FBI has disrupted infrastructure associated with a technical "quartermaster" that ...
bleepingcomputer.com/news/security/fbi-disrupts-proxy-network-enabling-chinese-espionage-operations/
Femtosecond nano-imaging reveals ultrafast optical control of phonon polaritons: A collaborative research team has successfully visualized in real space the ...
phys.org/news/2026-08-femtosecond-nano-imaging-reveals-ultrafast.html
My old Android phone became a Linux server, and it handles more than I expected: The performance is comparable to a Raspberry Pi
xda-developers.com/old-android-phone-linux-server-handles-more-expected/
Microsoft sets 2027 deadline to begin retiring some classic SharePoint features for good
neowin.net/news/microsoft-sets-2027-deadline-to-begin-retiring-some-classic-sharepoint-features-for-good/
A 10-year-old Intel chip transcodes more Jellyfin streams than my graphics card ever could
xda-developers.com/old-intel-chip-transcodes-more-jellyfin-streams-than-my-graphics-card-ever-could/
Bots found my home server in minutes - here’s how I kept them out: Don't assume your home is too small to target anymore
xda-developers.com/bots-found-my-home-server-in-minutes-heres-how-i-kept-them-out/
WIRED Aug 26
FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure
wired.com/story/fbi-disrupts-chinese-proxy-tools-used-in-mass-hacking-of-us-agencies-and-infrastructure/
Brave Accounts: Browser developer introduces passwordless server logins via OPAQUE
stadt-bremerhaven.de/brave-accounts-browser-entwickler-fuehrt-passwortlose-server-logins-via-opaque-ein/
dlvr.it Aug 19
Postgres pioneer credits Oracle with helping his database take over the world: Big Red's acquisition of MySQL sent users running toward the open source ...
theregister.com/databases/2026/08/19/postgres-pioneer-credits-oracle-with-helping-his-database-take-over-the-world/5289087
Hackers infect Android car head units with proxy botnet malware: A supply-chain attack targeting Android-based car head units is using a legitimate device-update ...
bleepingcomputer.com/news/security/hackers-infect-android-car-head-units-with-proxy-botnet-malware/
Hackers abuse FTP server banners to deliver new Windows malware: Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented ...
bleepingcomputer.com/news/security/hackers-abuse-ftp-server-banners-to-deliver-new-windows-malware/
Indictment: Nvidia manager allegedly smuggled AI servers to China: Taiwan has indicted nine people for illegally exporting state-of-the-art AI servers to China ...
winfuture.de/news,160826.html
dlvr.it Aug 26
Self-hosted email is in steep decline, Microsoft and Google are taking over: Oh great, Big Tech is now in a great position to decide which messages get through
theregister.com/software/2026/08/26/self-hosted-email-is-in-steep-decline-microsoft-and-google-are-taking-over/5292471
Fortnite servers down status: Game goes offline and servers stop working for major v42 update
independent.co.uk/tech/fortnite-server-status-update-new-v42-b3036219.html
I replaced Google Photos with Immich, and my entire photo library finally stays under my control
xda-developers.com/i-replaced-google-photos-with-immich-and-my-entire-photo-library-finally-stays-under-my-control/
Critical VMware vCenter RCE flaw exploited for reverse SSH access: A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is ...
bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/
Critical Elementor Pro bug exposes WordPress sites to RCE attacks: A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload ...
bleepingcomputer.com/news/security/critical-elementor-pro-bug-exposes-wordpress-sites-to-rce-attacks/
The Duskbloods Network Test Session Closed After Disastrous Server Issues: "We sincerely apologize for any inconvenience"
nintendolife.com/news/2026/08/the-duskbloods-network-test-session-closed-after-disastrous-server-issues
github.com Aug 20
GitHub - mostlygeek/llama-swap: Reliable model swapping for any local OpenAI/Anthropic compatible server - llama.cpp, vllm, etc
github.com/mostlygeek/llama-swap
FromSoftware 'Sincerely Apologizes' for The Duskbloods Network Test 'Server Issues,' Ends First Slot Early
ign.com/articles/fromsoftware-sincerely-apologizes-for-the-duskbloods-network-test-server-issues-ends-first-slot-early
Homey Pro and Self-Hosted Server: Critical security update v13.4.1 closes vulnerability
stadt-bremerhaven.de/homey-self-hosted-server-kritisches-sicherheits-update-v13-4-1-veroeffentlicht/
