Vulnerabilities and CVEs

21:29 Patch

Splunk security advisory (AV26-1077)

Canadian Centre for Cyber Security

21:05 Exploited

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

The Hacker News

21:00 Vulnerability

PHP2Shell Exposure Depends on More Than Whether You Use PHP

CVE-2026-109618CVE-2026-109619Horizon3.ai

20:31 Vulnerability

Memory Safety, AI security, Auth Challenges - BTS #84

Eclypsium

20:17 Patch

Signal Vulnerability Could Keep Calls Alive After Users Hang Up

CVE-2026-113380Security Affairs

20:12 Vulnerability

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

The Hacker News

20:04 Vulnerability

I had plans for that second

Cisco Talos

19:45 Patch

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

The Hacker News

19:18 Exploited

Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

BleepingComputer

19:01 Patch

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

The Hacker News

17:58 Patch

Chrome Beta for Android Update

Chrome Releases

17:54 Vulnerability

Atlassian security advisory (AV26-1076)

Canadian Centre for Cyber Security

17:52 Vulnerability

PHP2Shell Exploit Tooling Found on Exposed Attacker Server

SOCRadar

17:38 Vulnerability

USN-8953-1: OpenVPN vulnerability

Ubuntu Security

17:25 Vulnerability

Hackers got a four-day head start on epic PHP2Shell vulnerability

Ars Technica

17:13 Patch

Chrome Beta for iOS Update

Chrome Releases

16:55 Patch

PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports

Security Affairs

16:00 Vulnerability

CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability

CVE-2026-105014Microsoft Security Response Center

16:00 Vulnerability

CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability

CVE-2026-108456Microsoft Security Response Center

16:00 Vulnerability

CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability

CVE-2026-97785Microsoft Security Response Center