UPDATED
Every story on Updated that mentions AWS, newest first. Each headline links to a summary page with the original source, so you can scan the topic in under a minute.
News – MeriTalk · · Medium severity
The Cybersecurity and Infrastructure Security Agency (CISA) added two critical flaws in the PHP programming language to its Known Exploited Vulnerabilities (KEV) Catalog on Oct. 26 and gave federal civilian executive branch agencies...
Slashdot ·
Apple has acknowledged an inner-display defect affecting a small number of its new $1,999 iPhone Duo foldables after customers reported hearing a crunch while unfolding the device before cracks, lines and other display failures appeared...
AWS Security Blog ·
We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce the successful completion of our first ever Cloud High (PBHH) security assessment with 172 assessed services and...
The Hacker News ·
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds...
Cybersecurity Dive - Latest News ·
The security community has come under increased scrutiny as earlier threat warnings were slow to materialize.
Analytics India Mag ·
Beverage company and cafe chain Chai Point has cut its AWS cloud bill by 58.2%. Dharmendra Raghuvanshi, Chai Point's director and head of digital transformation, shared the numbers in a LinkedIn post. Raghuvanshi says the company’s...
SecurityWeek ·
Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released. The post Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws appeared first...
TechRepublic ·
Apple's iOS 27.2 fixes 163 security vulnerabilities, including WebKit and privacy flaws. IT teams should review updates across managed devices. The post Apple Just Patched 163 iPhone Security Flaws — Here’s What Was at Risk appeared...
Innovation Village | Technology, Product Reviews, Business ·
Uber Kenya has failed to secure its removal from a lawsuit filed by 37 motorcycle riders who allege that the ride-hailing company deactivated their accounts without adequate explanation, leaving their livelihoods at risk. Kenya’s High...
BleepingComputer ·
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more.
SecurityWeek · · Critical severity
Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches Dozens of Critical Flaws in Networking Products appeared first on SecurityWeek .
Tahawul Tech ·
Madhavi Reddy, Managing Director, AWS MENAT. Madhavi Reddy discusses AI governance, workforce skills, and the need to turn productivity gains into business growth across MENAT Organisations are investing in AI, but technology alone will...
Tahawul Tech ·
Verizon recently announced that the company has entered into an agreement worth more than $2 billion with Amazon Web Services (AWS) to supply dark fibre infrastructure to meet AI workload demand. The operator noted the AWS agreement...
PYMNTS.com · · Medium severity
Fraud attacks can now be assembled with commercially packaged software, distributed across accounts and devices, and altered faster than banks can rewrite a conventional fraud rule. “We’re seeing fraudsters leverage commoditized SaaS...
ESET WeLiveSecurity · · Medium severity
Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more than two minutes
The Hacker News · · Critical severity
Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both...
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine ·
Reports of the problem first surfaced on Reddit and other social media sites
Slashdot · · Critical severity
The critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have now been successfully exploited in the wild, just days after patches were released and initial exploitation attempts failed. BleepingComputer reports: The...
PYMNTS.com ·
The Federal Trade Commission and 20 states sued Dollar General Monday (Oct. 26), alleging that the retailer routinely overcharges customers and has done so for years. The complaint alleged that Dollar General routinely charges customers...
AWS News Blog ·
A few weeks ago I presented to a small group of commercial and technology leaders from Brazilian agribusiness at the AWS office in São Paulo. My talk ran through where generative AI fits across the different stages of an agribusiness...
Infosecurity Magazine ·
Six Linux flaws were made public, including one with a working root exploit and no merged fix
The Hacker News ·
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first...
TNW ·
Verizon raised its forecasts for 2026 on Monday after a strong quarter for new phone customers. It also announced a deal worth more than $2bn with Amazon Web Services (AWS) to support AI workloads. Under the AWS agreement, Verizon will...
Help Net Security ·
Fortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about the fixed vulnerabilities under wraps until November 10, 2026. The...
BleepingComputer · · Medium severity
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.
The Hacker News · · Medium severity
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up...
TechSpot ·
Prince told Reuters that Cloudflare is aware of "a bunch of additional severe vulnerabilities that are present in other pieces of critical software," though he did not name the affected programs. He compared them to the PHP bugs that...
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · · Critical severity
On October 21, PHP released fixes for two critical vulnerabilities that could enable unauthenticated remote code execution (RCE), urging users to update to the latest supported PHP 8 versions
TNW ·
Amazon has settled its lawsuit against two former Amazon Web Services real estate managers it accused of taking kickbacks on data centre deals, GeekWire reported. Amazon told the court on 20 October, less than two weeks before trial....
MacRumors ·
Night Shyamalan have won an appeal in the copyright dispute over Apple TV series "Servant," with a federal appeals court upholding last year's jury verdict in their favor (via Reuters ). In its October 22 decision , the Ninth Circuit...
The Hacker News · · Critical severity
Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing...
GeekWire ·
Two former Amazon real estate managers acknowledged receiving personal payments tied to data center deals they handled for the company, and apologized for failing to meet Amazon’s ethical standards, under a settlement that resolves the...
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine ·
Cybersecurity experts warn that artificial intelligence is accelerating the discovery and exploitation of software flaws, leaving organisations less time to respond
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine ·
Cybersecurity experts warn that artificial intelligence is accelerating the discovery and exploitation of software flaws, leaving organisations less time to respond
The Hacker News ·
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab...
Android Authority ·
TL;DR Smart ring maker Oura is suing Ultrahuman again, seeking to have the Ring Pro removed from US shelves over alleged patent infringement. Ultrahuman’s co-founder says the company will respond to the claims and that the Ring Pro...
PYMNTS.com ·
Rhode Island Attorney General Peter F. Neronha sued Meta Thursday (Oct. 22), alleging that the company fails to block advertisements for fraudulent products and financial scams on its platforms, Neronha said in a press release.
TechRadar · · Medium severity
AWS says hackers tried to exploit PHP security issues days before fix — as Cloudflare CEO says it saw a huge rise in targeted attack attempts
TNW ·
Cloudflare has recorded millions of attempts to exploit two critical PHP vulnerabilities since details became public on Wednesday, according to CEO Matthew Prince. The flaws affect PHP, a programming language used to power much of the...
BleepingComputer ·
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues.
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free