Critical flaws strike PHP as disclosure embargo is broken

PHP maintainers are urging users to prepare for patches addressing two critical vulnerabilities, CVE-2026-109618 and CVE-2026 ...
Hosted on MSN

The $25 AI exploit that exposed a critical flaw in WordPress — is your site exposed?

Here is a number that should stop any media executive cold: $25. That is the total compute cost for a security researcher using ChatGPT to discover WP2Shell — one of the most significant security ...
SDxCentral

Cisco patches critical communications exploit

Cisco patched a critical exploit affecting some of its communication-based products. Designated as CVE-2026-20045, the vulnerability allows bad actors to run arbitrary commands on an affected device’s ...
techtimes

Chrome Security Update Patches Two Critical RCE Flaws: One Exploit Still Public, Unpatched

Google pushed a security update for Chrome on May 19, 2026, patching 16 vulnerabilities — including two rated Critical — that could allow an attacker to execute arbitrary code on a victim's machine ...
Help Net Security

PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)

Security researchers who discovered and reported CVE-2026-54121 (aka “Certighost”), a critical privilege elevation vulnerability in Active Directory Certificate Services (AD CS), have released a proof ...