⚠️BREAKING: UNIVERSITY HACK EXPOSES 525,000 PEOPLE’S DATA
Hackers accessed a University of Copenhagen test database containing names, Danish national ID numbers, phone numbers and personal email addresses of around 525,000 people.
The university has blocked access and launched an investigation. It remains unclear whose data was affected or whether it was copied.
⚠️BREAKING: UNIVERSITY HACK EXPOSES 525,000 PEOPLE’S DATA
Hackers accessed a University of Copenhagen test database containing names, Danish national ID numbers, phone numbers and personal email addresses of around 525,000 people.
The university has blocked access and launched an investigation. It remains unclear whose data was affected or whether it was copied.
⚠️BREAKING: GODADDY TO REVOKE 404,607 TLS CERTIFICATES
GoDaddy is revoking 404,607 TLS certificates after a third party discovered that their certificate policy information did not comply with the company’s published rules.
The issue affects certificates issued under GoDaddy and Starfield, its certificate authority brand. GoDaddy has corrected the documentation and resumed certificate issuance, while coordinating replacements with affected customers.
Website owners using affected certificates must reissue and reinstall them to avoid potential HTTPS disruptions. GoDaddy says the issue concerns certificate compliance, not evidence that the certificates were compromised.
⚠️BREAKING: INDIA WARNS OF AI DEEPFAKE SCAMS USING MODI AND NIRMALA SITHARAMAN
India’s cybercrime agency has warned about fraudulent Facebook and Instagram ads using AI-generated deepfakes of Prime Minister Narendra Modi and Finance Minister Nirmala Sitharaman to promote fake welfare schemes.
Victims are reportedly asked to pay successive charges, including taxes, processing fees and verification fees, to access promised benefits. Some callers reportedly use +92 numbers, Pakistan’s country code.
Authorities urge people to verify government schemes through official channels and never pay upfront fees based on social media advertisements.
⚠️BREAKING: WORKING EXPLOIT EMERGES FOR CRITICAL PHP ZERO-DAYS BEFORE PATCH
Security firm Calif reportedly demonstrated a working exploit for two critical PHP vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, ahead of the scheduled security patch.
A briefly published video showed commands being executed on a WordPress site running PHP 8.5.4. Security researcher Kevin Beaumont reportedly confirmed the screenshot was genuine, while a separate public proof-of-concept remains unreliable.
The flaws could enable remote code execution without authentication, potentially putting websites and applications built on PHP at risk. The official patch was scheduled for 14:00 UTC on October 21.
PHP core developers have warned that temporary configuration changes are not a reliable substitute for upgrading. Administrators should prepare to install the official fix immediately upon release.