You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that suggested it now says. PHP will release the fix at 14:00 UTC on October 21 for two flaws it rates 9.2 out of 10, and has given no workaround of its own. Until you can install it, what lowers your

An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run against production and worth acting on afterward lives in the harness around the model. The harness is where the engineering in AI pentesting sits. The Hugging Face intrusion OpenAI disclosed in July

Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found. Exit relays are the last hop in a Tor circuit, where traffic leaves the network for its destination. Only a password login to an SSH server made through Tor between October 1 and 5, after accepting the interception

As SpaceX reports blockbuster quarterly earnings, CEO Elon Musk floats the possibility of merging the rocketry and AI firm with his electric car company Tesla. Also in this edition: OpenAI reveals more agent misbehaviour as market turmoil hits data centre companies, and France's political crisis exacerbates its bond market rout.

As conversations around generative AI continue to dominate headlines, new research from small group travel operator Explore Worldwide reveals that people are more than twice as likely to trust someone with first-hand experience when looking for recommendations in an unfamiliar destination than an AI tool. In a survey of 2,000 working adults in the UK, conducted by Opinion Matters on behalf of Explore Worldwide, recommendations from friends or family who had visited the destination were trusted by four in five respondents when considering experiences somewhere they had never been, compared with just 32% who would trust an AI tool.

Gusts of wind about 50 to 60mph are likely to hit large parts of south Wales on Friday.