security – Tech News

PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet

The U.S. National Security Agency’s sent out an alarming warning on Wednesday that two critical holes had been found in PHP, with patches already issued by the PHP Foundation. PHP is a server-side programming language so widely used for web applications that it powers roughly 70% of the websites on the internet; by some accounts, that’s more than 33 million sites. It is also used by popular content management systems like WordPress.
https://techcrunch.com/2026/10/21/php-armageddon-openai-googles-wiz-find-ancient-holes-panicking-the-internet/

Meta Admits Its Smart Glasses Briefly Recorded Audio Without a Wake Phrase

Security concerns surrounding Meta’s smart glasses just keep piling up. After complaints about nonconsensual video recording, the glasses have now been found to record user audio without consent. “This issue has been resolved. People can manage, review and delete voice logs of their interactions with Meta AI via settings at any time,” a Meta spokesperson said.
https://www.pcmag.com/news/meta-admits-its-smart-glasses-briefly-recorded-audio-without-a-wake-phrase

Worried About Snooping Smart Glasses? This Startup’s Tech Detects Nearby Specs

Bastille Networks, a startup specializing in wireless intrusion detection, announced Thursday what it called “first-of-its-kind software” to spot smart glasses at customer sites. The San Diego-based firm pitches this new solution, available to companies that already subscribe to its monitoring services, as going well beyond indie apps like Nearby Glasses and the cleverly named Zuckoff that scan for Bluetooth Low Energy signals from smart glasses
https://www.pcmag.com/news/worried-about-snooping-smart-glasses-this-startups-tech-detects-nearby

Norway considers ban on camera-enabled wearable ‘pervert glasses’

Norway’s Tung said there is a “clear trend toward combining artificial intelligence with cameras and microphones built into glasses, headphones, hats and other objects we use in everyday life.” “We must prevent this equipment from being used to monitor other people in public places,” said Tung, who added that this may include banning the use of facial recognition of other people in public places.
https://techcrunch.com/2026/09/02/norway-considers-ban-on-camera-enabled-wearable-pervert-glasses/

OpenAI hit the brakes. Now what?

With a looming IPO, intense competition from Anthropic, and Chinese and open-weight rivals nipping at its heels, OpenAI has plenty of reasons to move fast. Instead, it hit the brakes. On Tuesday, the company said it had slowed the pace of some AI development while it tightened security and safeguards. That included a two-week pause in reinforcement learning training on its “latest models intended for deployment,” and an ongoing delay to its “largest planned frontier RL run.”
https://www.theverge.com/ai-artificial-intelligence/982323/openai-hit-brakes-voluntary-pacing-ai

International cyber attack disrupts swath of universities and schools

The hacking group ShinyHunters claimed responsibility for the attack, which caused the academic software Canvas used by thousands of schools and universities to go offline this week.
https://www.bbc.com/news/articles/ce3pq0136eqo

Hackers are actively exploiting a bug in cPanel, used by millions of websites

Security researchers are sounding the alarm on a newly discovered vulnerability in the widely used web server management software cPanel and WebHost Manager (WHM). The bug allows hackers to hijack and take full control of the servers running the affected software, which is thought to be used by tens of millions of website owners around the world.
https://techcrunch.com/2026/04/30/hackers-are-actively-exploiting-a-bug-in-cpanel-used-by-millions-of-websites/