Latest news
-
Vulnerabilities via Tenable
php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities
Two critical PHP remote code execution vulnerabilities will be patched in an emergency release on October 21. Fixes are only expected for supported PHP 8.x branches. Key…
-
Threat Intel via The Hacker News
Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and…
-
Threat Intel via Help Net Security
Info-stealing malware slipped into OVHcloud CLI releases on GitHub
OVHcloud, the French cloud computing and web hosting company, alerted customers that a hacker tampered with its open-source command-line interface (CLI) tool to spread…
-
Threat Intel via Help Net Security
Safari blocks trackers that turn your email into a tracking ID
Apple’s new anti-tracking protections in Safari and WebKit, the open-source web engine used by Safari, block connections to identity resolution services that turn email…
-
Ransomware via BleepingComputer
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since…
-
AI Security via The Hacker News
U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases
U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services "developed using…
-
Breaches via The Hacker News
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not…
-
Ransomware via ransomware.live
🏴☠️ Clop has just published a new victim : LEGAL-RECORDS.US
[AI generated] N/A I don't have verified, reliable information about a specific company operating under the name "LEGAL-RECORDS.US." This appears to be a domain name…
- Advertisement
-
Ransomware via RansomLook
GSE-M Technology Sdn. Bhd. 🇲🇾 By bravox
Industrial Engineering, Manufacturing Automation and Custom Machinery Solutions.
-
Ransomware via RansomLook
The Complete Engineering Data Chain in ADAS and Automotive Structural Projects: What Usual By sovcali
Companies prefer to keep the behind the scenes aspects of their design and analysis processes out of public view. What is usually released consists of final reports and…
-
Vulnerabilities via The Hacker News
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including…
-
Vulnerabilities via SecurityWeek
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
-
Vulnerabilities via Fortinet PSIRT
PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
CVSSv3 Score: 9.8 CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not…
-
Threat Intel via The Hacker News
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report published by Russian…
-
Threat Intel via SecurityWeek
Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
Researchers say the developer’s account was compromised in March with a GlassWorm-linked loader.
-
AI Security via Help Net Security
Privacy-preserving AI can protect your heart data, the bill is the problem
A heart monitor used to be a box beside a hospital bed. Electrodes fed a cable, the cable fed a screen, and a nurse watched the screen. The threat model fit on a sticky…
-
Threat Intel via Security Affairs
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections
Citizen Lab confirmed Pegasus on a Serbian rector’s iPhone 6 days before elections, raising the known civil society spyware target count to 16. The Citizen Lab published…
-
Vulnerabilities via Help Net Security
DevGuard: Open-source vulnerability management for the software supply chain
DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them…
-
Threat Intel via Group-IB
Stray Cat, Open Doors: How k0t Wanders Through the Network Edge
Group-IB and NyxLab expose threat actor k0t's large-scale campaign exploiting FortiGate, FortiWeb, and Palo Alto GlobalProtect edge devices to harvest credentials…
-
AI Security via Help Net Security
Why security tools lose sight of the credential
Security teams have tools for code, endpoints, cloud infrastructure, identity, and secrets management. Credentials cut across all of them. A developer finds an AWS key…