Web hosts are scrambling to fix the bug under active attack by hackers. One company said hackers have been abusing the bug for months.

The security bug is now fixed, but the patient who found it said it was challenging to alert the software company about the issue.

The government of Sri Lanka has lost more than $3 million in two recent, separate cybersecurity incidents as the country continues to recover from its 2022 debt crisis.

The U.S. top court is expected to rule on whether to allow police to identify criminal suspects by dragnet searching the databases of tech giants.