Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
Two critical PHP RCEs, CVE-2026-109618 and CVE-2026-109619, leaked before the patch. Learn what's known, who's exposed, and how…
1 min Open reportTwo critical PHP RCEs, CVE-2026-109618 and CVE-2026-109619, leaked before the patch. Learn what's known, who's exposed, and how…
1 min Open reportIn January, we responded to the Lazarus Group’s novel attack campaign against South Korea, which followed last year’s Operation…
1 min Open report(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
1 min Open reportA threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially…
1 min Open reportLearn about the two critical vulnerabilities in PHP dubbed PHP2Shell.
1 min Open reportOn October 20, 2026, details of two critical remote code execution vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619…
1 min Open reportThe advancing technology offers campaigns the tools to make compelling, lifelike ads. That’s leading even seasoned political…
1 min Open reportMalicious releases of LiteLLM v1.107.0 were published to PyPI and container registries following multiple maintainer account…
1 min Open reportTwo critical remote code execution vulnerabilities in the PHP engine, CVE-2026-109618 and CVE-2026-109619 (nicknamed…
1 min Open reportA 45-year-old U.S. citizen pleaded guilty to running a widespread identity theft and fraud scheme that defrauded thousands of…
1 min Open reportOn October 19, 2026, at approximately 17:00 UTC, Cloudflare became aware that private keys associated with eight eMudhra…
1 min Open reportThe FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing…
1 min Open reportSerial number: AV26-1067 Date: October 20, 2026 As of October 19, 2026, Craft CMS is affected by vulnerabilities in the following…
1 min Open reportHow a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of…
1 min Open reportThe Chrome Root Program received a report from a security researcher regarding the compromise of private keys associated with…
1 min Open reportA 40-year-old Nigerian national was sentenced to eight years in prison for running a years-long hacking, tax fraud and investment…
1 min Open reportRussian government-connected hackers compromised two defense firms and a law enforcement agency in North Atlantic Treaty…
1 min Open reportSerial Number: AV26-845 Date: August 25, 2026 Updated: October 20, 2026 As of August 14, 2026, Gitea is affected by…
1 min Open reportA Nigerian national who worked with a group to hack tax prep businesses and conduct millions of dollars in fraud using customer…
1 min Open reportGoogle is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying…
1 min Open report