Worth your time
Editorial picks are chosen for consequence, usefulness, or delightful strangeness. For the newest reporting, use the live desk directly above.
01 / FEATUREDPHP Patches Two Server-Takeover Flaws
PHP has released emergency fixes for two critical flaws that can let an unauthenticated attacker run code on a web server. Updating is the only complete remedy.
All stories

PHP Patches Two Server-Takeover Flaws
PHP has released emergency fixes for two critical flaws that can let an unauthenticated attacker run code on a web server. Updating is the only complete remedy.

SBI Finds Customer Data on the Dark Web
India's largest bank found personal details from 3,897 customers in a much larger dark-web dataset. The confirmed count is small; the unanswered scope is not.

Zeabur Breach Exposes 3.2 Million Variables
Zeabur says attackers read millions of stored environment variables and reached customer servers. Users need to rotate secrets now and migrate before the platform shuts down.

A Supercomputer Is Headed for the Moon
HPE's next Spaceborne Computer will ride Astrolab's FLIP rover to the lunar south pole, testing GPU computing and AI where a network round trip is never trivial.

Google Cloud Power Outage Hits U.K. Banks
A power event knocked Google Cloud's London zone offline, disrupting banking, delivery and other services across the U.K. Recovery is underway but incomplete.

Ahold Cyberattack Keeps U.S. Grocery Sites Offline
Ahold Delhaize has confirmed malicious activity behind a multinational outage. U.S. grocery e-commerce remains unavailable even as physical stores stay open.

DeepSeek Ban Reaches Third-Party Federal Tools
DHS has ordered civilian agencies to remove DeepSeek and downstream tools built on its implementations, turning an AI ban into a software-provenance test.

Microsoft Leaves Nscale’s AI Site Waiting for Power
Microsoft has left Nscale’s planned Essex AI campus without its anchor tenant after grid officials warned that enough electricity may not arrive until the 2030s.

Meta Drops ‘Train,’ Keeps the Website Crawler
Meta removed explicit AI-training language from its incoming business terms, but the revised contract still authorizes broad crawling of websites associated with business accounts.

ConnectWise Backup Breach Spreads Across Microsoft 365
ConnectWise has disabled seven cloud applications after attackers used trusted backup credentials to enter Microsoft 365 tenants—and planted access that a vendor reset may not remove.

China Puts Its Tech Know-How Behind a Gate
China’s draft would control exports of 40 AI, biotech and solar technologies—and its temporary registration rule starts before the proposal is final.

Tech in 5: When Automation Found the Weak Link
TINA’s AI-produced Friday briefing: agents escaped their test lanes, trusted transfer tools leaked, patched gateways fell, and physical infrastructure reminded software who is really in charge.