Coderyx Blog

Cyber Security · 02nd November, 2026 · 4 min read

Applebee’s Customer Data Exposed After Database Password Was Found in Its Mobile App

A security flaw in Applebee’s Android application exposed registered customers’ personal information after a researcher discovered a hardcoded database password hidden in the app’s source code. The exposed information included names, email addresses, phone numbers, dates of birth, and other account details. Although Applebee’s parent company says the vulnerability has been fixed, questions remain about the extent of the exposure and whether unauthorized access occurred.

34 readers Read Essay →

Applebee’s Customer Data Exposed After Database Password Was Found in Its Mobile App

Cyber Security · 30th October, 2026 · 6 min read

Binance Investigates $6.3 Billion Security Incident as Crypto Withdrawals Are Suspended

Binance is investigating a major security incident with an estimated impact of $6.3 billion, prompting the cryptocurrency exchange to temporarily suspend deposits and withdrawals. The company's initial findings point to a potentially compromised engineer's laptop, while blockchain partners have helped freeze approximately $3 billion in affected assets. Binance says customers will not bear the losses as investigations continue.

56 readers Read Essay →

Binance Investigates $6.3 Billion Security Incident as Crypto Withdrawals Are Suspended

Cyber Security · 29th October, 2026 · 6 min read

South Korea Faces New Cyberattacks on Financial Firms as AI Security Risks Grow

South Korea's financial sector is facing a fresh wave of cyberattacks affecting Daishin Securities, Mirae Asset Global Investments, and cryptocurrency exchange Bithumb. One incident exposed personal information belonging to more than 38,000 customers, while other firms reported unauthorized access to internal systems. The cases have intensified concerns about financial cybersecurity and the potential role of AI-assisted hacking.

74 readers Read Essay →

South Korea Faces New Cyberattacks on Financial Firms as AI Security Risks Grow

Cyber Security · 25th October, 2026 · 5 min read

The Salt Typhoon Infiltration: Deconstructing How Advanced Threat Actors Breached Global Telecom Backbones and Lawful Intercept Portals

A sweeping investigation into the Salt Typhoon cyber espionage campaign reveals how advanced threat actors compromised major telecommunications providers, gaining persistent access to lawful wiretap infrastructure and carrier-grade core routers.

4,197 readers Read Essay →

The Salt Typhoon Infiltration: Deconstructing How Advanced Threat Actors Breached Global Telecom Backbones and Lawful Intercept Portals

Cyber Security · 24th October, 2026 · 5 min read

The "php2shell" Emergency: Unpacking the Critical Unauthenticated RCE Flaws in Core PHP Memory Management

Emergency security advisories released this October track two critical 9.2 CVSS vulnerabilities in core PHP memory handling—dubbed "php2shell"—allowing unauthenticated remote code execution across PHP-FPM, Apache, and FrankenPHP.

6,187 readers Read Essay →

The "php2shell" Emergency: Unpacking the Critical Unauthenticated RCE Flaws in Core PHP Memory Management

Cyber Security · 23rd October, 2026 · 4 min read

Critical Remote Code Execution Flaw in PHP Core: CVE-2024-4577 Analysis, Exploitation Vectors, and Immediate Remediation

A severe argument injection flaw impacting PHP running in CGI mode allows unauthenticated attackers to execute arbitrary system commands via character encoding normalization bugs. Security teams must patch immediately.

4,932 readers Read Essay →

Critical Remote Code Execution Flaw in PHP Core: CVE-2024-4577 Analysis, Exploitation Vectors, and Immediate Remediation

The Latest Dispatches