Tag: exploit
-
Even after PHP2Shell, blast radius matters more than a CVSS score
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/even-after-php2shell-blast-radius-matters-more-than-a-cvss-score/
-
InfraTrust report warns of exploited flaws in critical network infrastructure
Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as “PHP2Shell” put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at risk. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/infratrust-report-warns-of-exploited-flaws-in-critical-network-infrastructure/
-
Black Duck launches AI agent to fix vulnerabilities as fast as attackers exploit them
Application security vendor Black Duck has launched Signal Agentic Fix, a new AI agent designed to shrink the gap between vulnerability discovery and a validated fix reaching production. The agent is the latest addition to Black Duck Signal, the company’s collection of AI agents aimed at removing the human workflow bottlenecks that stop security teams…
-
Anthropic’s Claude Chains One-Click and Zero-Click Exploits to Bypass Chrome, Android and Linux Security
Anthropic announced that an unreleased research model called Claude successfully developed working exploit chains for Chrome, Safari, Android, Windows, and Linux. The company’s Frontier Red Team shared these findings on October 27, 2026. Many exploit chains required minimal or no user interaction, and the team reported every identified flaw to the respective vendor before publication.…
-
U.S. CISA adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Brotliand Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Google Brotli and Adobe Commerce and Magento vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the flaws added to the catalog: Brotli is a data-compression algorithm…
-
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-now-exploiting-critical-node2shell-flaw/
-
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation.The list of eight vulnerabilities is as follows – CVE-2026-104351 (CVSS score: 9.9) – A code injection vulnerability that could lead to arbitrary code execution. First seen…
-
Angriff auf PXE-Boot: 16 Jahre alte Uefi-Lücke gefährdet unzählige Server
Eine kritische Sicherheitslücke lässt Angreifer aus der Ferne Schadcode in PXE-Bootprozesse schleusen. Details wurden versehentlich zu früh geleakt. First seen on golem.de Jump to article: www.golem.de/news/angriff-auf-pxe-boot-16-jahre-alte-uefi-luecke-gefaehrdet-unzaehlige-server-2610-214589.html
-
Three Japan-Focused Cyberattacks Show How Hackers Use AI
Three Japan-focused cyberattacks show how AI helps hackers scale operations, while exploiting old systems and weak security remains key. In autumn 2026, Japanese companies and other organizations reported a series of data leaks involving their web systems. On October 9, Japan’s National Cybersecurity Office issued a warning to businesses, while the head of the ruling…
-
Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report.The exploits were built in the lab after the model was prompted, not seen in any real attack, and Anthropic reported every flaw to the vendor first,…
-
Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report.The exploits were built in the lab after the model was prompted, not seen in any real attack, and Anthropic reported every flaw to the vendor first,…
-
Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report.The exploits were built in the lab after the model was prompted, not seen in any real attack, and Anthropic reported every flaw to the vendor first,…
-
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week.Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its…
-
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
Tags: adobe, attack, breach, cve, cybersecurity, exploit, google, infrastructure, kev, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google’s Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.The vulnerabilities are listed below – CVE-2026-111497 (CVSS score: 9.2) – An unchecked return value vulnerability in First seen on thehackernews.com…
-
DLL Sideloading im Installationstool – Siemens Software Center wird zum Einfallstor für Schadcode
First seen on security-insider.de Jump to article: www.security-insider.de/siemens-software-center-cve-2026-110936-dll-sideloading-a-5cfd9eeea92a4fd9640579786f049c49/
-
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
New York, NY, October 27th, 2026, CyberNewswire The root-cause fix will take weeks; protection can’t wait Sweet Security today announced Sweet Safety Net, extending its runtime Virtual Patching protection to every organization affected by HTTP2Shell (CVE-2026-111497). The capability will enable users to block any exploitation of Node2Shell at no cost for 30 days, whether or…
-
Hackers Use Signed ChatGPT and Claude Binaries to Deploy Yoba Malware
Hackers are exploiting growing interest in AI tools to spread Yoba malware through fraudulent GitHub projects that claim to offer non-existent desktop applications named GPT-5.6 Sol, GPT-6 Astra, and Claude Opus. According to Check Point Research, these repositories and GitHub Pages attracted users through apparent SEO poisoning, with download buttons that delivered malicious ZIP files.…
-
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
New York, NY, October 27th, 2026, CyberNewswire The root-cause fix will take weeks; protection can’t wait Sweet Security today announced Sweet Safety Net, extending its runtime Virtual Patching protection to every organization affected by HTTP2Shell (CVE-2026-111497). The capability will enable users to block any exploitation of Node2Shell at no cost for 30 days, whether or…
-
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
New York, NY, October 27th, 2026, CyberNewswire The root-cause fix will take weeks; protection can’t wait Sweet Security today announced Sweet Safety Net, extending its runtime Virtual Patching protection to every organization affected by HTTP2Shell (CVE-2026-111497). The capability will enable users to block any exploitation of Node2Shell at no cost for 30 days, whether or…
-
PHP2Shell Actively Exploited, US Cybersecurity Agency Warns
North Koreans Tied to Active Scanning for Critical Vulnerabilities in PHP. The U.S. Cybersecurity and Infrastructure Security Agency sees critical PHP2Shell vulnerabilities being exploited in the wild, and is requiring federal civilian agencies to rapidly mitigate them. Researchers said North Korean hackers are among the many threat actors showing an interest in the flaws. First…
-
Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking
Australia’s cyber agency warns AI will drive more disruptive attacks, helping hackers find vulnerabilities faster and exploit them at greater scale. Australia’s top cyber spy has a blunt message: expect more disruption to everyday services. Abigail Bradshaw, director-general of the Australian Signals Directorate (ASD), says that with each jump in AI capability, more disruption is…
-
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its… First seen on hackread.com Jump to article: hackread.com/cisa-confirm-php2shell-exploit-federal-agencies-patch/
-
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its… First seen on hackread.com Jump to article: hackread.com/cisa-confirm-php2shell-exploit-federal-agencies-patch/
-
CISA, security researchers confirm successful exploitation of PHP flaws
The security community has come under increased scrutiny as earlier threat warnings were slow to materialize. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-security-researchers-exploitation-php-flaws/872886/
-
5 Latest Updates On PHP2Shell Exploitation
While the U.S. cybersecurity agency has now confirmed exploitation of a pair of critical-severity PHP vulnerabilities, known as PHP2Shell, the extent of successful attacks leveraging the flaws remains unclear. First seen on crn.com Jump to article: www.crn.com/news/security/2026/5-latest-updates-on-php2shell-exploitation
-
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices.The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when processing a maliciously crafted file.Patches for the flaw were released last month by Apple…
-
US government says hackers are now exploiting critical PHP web bugs
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web’s software. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/27/us-government-says-hackers-are-now-exploiting-critical-php-web-bugs/
-
Tailscale warns of SSH flaws allowing root privilege escalation
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/tailscale-warns-of-serious-ssh-flaws-allowing-root-privilege-escalation/
-
CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch
CISA added the widely publicized PHP vulnerabilities to the KEV, but didn’t specify what kind of exploitation it was observing. First seen on therecord.media Jump to article: therecord.media/php-vulnerabilities-cisa-kev
-
New Sirius Backdoor Hides Inside Windows Processes to Steal Passwords and Evade Detection
A previously undocumented Sirius backdoor variant during a priority customer investigation, revealing a multistage campaign that hides malicious code inside legitimate Windows processes. The supplied analysis details stealthy remote access and persistence, although it does not establish specific password extraction capabilities. The financial urgency and regional tailoring reflect established phishing techniques that exploit trust in…