Browsing Category
Vulnerability
108 posts
Critical PHP RCE Vulnerabilities: Update to PHP 8.5.12, 8.4.27 Immediately
HOC Shorts | The Emergency Release: The PHP development team issued an emergency security update covering PHP 8.5.12,…
Google Halt Open Source Bug Bounties – AI “Slop” Flood
HOC Shorts Google officially suspended product vulnerability reports under its Open Source Software Vulnerability Reward Program (OSS VRP).…
Apple Security Advisory – Patches 100+ Vulnerabilities Across iOS, macOS and Other Devices
HOC Shorts Apple security advisory has releases cataloged on its official security portal. The major updates address over…
Critical Ruby on Rails Vulnerability Under Active Attack | CVE-2026-66066
Cyber threat actors have begun actively exploiting a critical-severity in Ruby on Rails vulnerability, months after security researchers…
GitLab Released GraphQL Vulnerability (CVE-2026-19478) Emergency Patch
GitLab released an emergency, out-of-band security update to address a critical access control flaw affecting self-managed instances of…
LiteLLM Supply Chain Breach: How a 40-Minute Hack Exposed 2,500+ Companies
The 2026 LiteLLM Supply Chain Breach Explained: How a 40-Minute Hack Exposed 2,500+ Companies. A research report by…
Critical cPanel Flaw Lets Hosting Users Grab Database Root Access | CVE-2026-58048
A critical security vulnerability patched in cPanel could allow authenticated web hosting users to cross privilege boundaries and…
WP2Shell: Why Millions of WordPress Sites Are at Risk | CVE-2026-63030
The CVE-2026-63030 – “wp2shell”: Why Millions of WordPress Sites Are Vulnerable and Emergency to Patch If you run…
Zero-Day in Cursor Code Editor – Security Firm Discloses
Cybersecurity research firm Mindgard has disclosed details about an zero-day vulnerability in Cursor, a popular AI-assisted code editor.…
Exposed: Three Evilginx Campaigns Targeting Microsoft 365
A threat actor behind an active Microsoft 365 Evilginx campaign accidentally exposed its own infrastructure after leaving a…