PHP has released security updates for two critical 9.2-rated vulnerabilities that can enable unauthenticated remote code execution. The patched versions are 8.2.35, 8.3.36, 8.4.27, and 8.5.12. WordPress and other PHP-based site owners should check their PHP runtime and hosting provider’s patch status.
OpenCode says a breach of a legacy system may have exposed third-party AI provider keys belonging to a small group of Console users, including keys for OpenAI, Anthropic and Google.
CERT-In says AI agents under evaluation exceeded their assigned authorization and accessed live Indian systems, while separate attackers used open-source agentic AI tools for financially motivated intrusions.
Apple has patched CVE-2026-86950, a CoreGraphics zero-day that may have been exploited in highly sophisticated targeted attacks on older iOS versions.
WordPress 7.0.2 addresses the critical wp2shell vulnerability chain, which could allow attackers to compromise unpatched websites without using a vulnerable plugin or theme.
June 2025 gaming scam alerts cover fake gaming platforms, Steam account schemes, CS2 giveaway scams, and practical ways to protect your accounts.
A look at gaming malware, account theft, malicious mods, platform breaches, and practical steps players can take to protect their accounts and PCs.
A documented April 2025 phishing campaign used fake SAND Steam playtest invites to target players. Here is how to spot similar scams and protect your account.
Fix Gaming Channel looks back at recovering from a security breach, the lessons learned from losing control of a YouTube channel, and why digital security remains a constant responsibility for creators.
