Tag: update
-
Apple Just Patched 163 iPhone Security Flaws, Here’s What Was at Risk
Apple’s iOS 27.2 fixes 163 security vulnerabilities, including WebKit and privacy flaws. IT teams should review updates across managed devices. The post Apple Just Patched 163 iPhone Security Flaws, Here’s What Was at Risk appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ios-27-2-security-flaws-patched/
-
Tailscale warns of SSH flaws allowing root privilege escalation
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/tailscale-warns-of-serious-ssh-flaws-allowing-root-privilege-escalation/
-
CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch
CISA added the widely publicized PHP vulnerabilities to the KEV, but didn’t specify what kind of exploitation it was observing. First seen on therecord.media Jump to article: therecord.media/php-vulnerabilities-cisa-kev
-
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks/
-
9 Managed File Transfer (MFT) Solutions: The 2026 Buyer’s Verdict Guide
MFT buying is posture-first now the category’s mass-exploitation years made exposure architecture and patch velocity selection criteria ahead of any scheduler. Roster honesty first: our sheet’s twelve rows resolve to nine vendors and eleven products Progress owns both MOVEit and WS_FTP, Fortra owns both GoAnywhere and Globalscape EFT, and ExaVault was acquired by Files.com years…
-
12 File Integrity Monitoring (FIM) Tools: The 2026 Buyer’s Verdict Guide
File integrity monitoring succeeds by what it ignores: PCI DSS mandates the control, but a tool that pages on every patch Tuesday trains the SOC to delete the folder. This verdict guide judges twelve FIM options on the property demos hide reconciling detected changes against authorized ones plus who-data, platform reach, and the agent-consolidation math…
-
Microsoft Authenticator vulnerability let rogue Android apps steal work account access
If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work account. The app … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/microsoft-authenticator-vulnerability-patchedcve-2026-80097/
-
EU makes progress towards PHP patching, UK lags behind
Tags: updateFive days into the PHP2Shell incident, and patch rates are creeping upwards, but the majority of publicly visible PHP hosts remain exposed. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652698/EU-makes-progress-towards-PHP-patching-UK-lags-behind
-
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code.PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses automatically.…
-
Microsoft releases emergency .NET patches for critical Brotli flaw
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-net-patches-for-critical-brotli-flaw/
-
PHP2Shell Warum Business-Continuity-Management kein Papiertiger sein darf
Die kritische PHP-Sicherheitslücke ‘PHP2Shell” hat Kliniken, Behörden und Hochschulen gezwungen, ihre Webseiten vom Netz zu nehmen. Ein Update schließt die Lücke doch die eigentliche Lehre liegt in den Stunden davor. Ein Kommentar von Silke Menzel, BCM-Expertin bei Hiscout. In der vergangenen Woche mussten zahlreiche Organisationen ihre Webseiten vorsorglich abschalten, darunter die Berliner Charité, Feuerwehren, […]…
-
KeePassXC 2.8.0 Released to Fix Multiple Security Vulnerabilities Affecting Password Manager
KeePassXC has released version 2.8.0 to address multiple security vulnerabilities related to database imports, browser integration, SSH key handling, and the protection of sensitive information. Published on October 21, this update includes eight security fixes, platform improvements, and a migration to Qt 6. Notably, one vulnerability is identified as CVE-2026-69150, and four additional issues are…
-
Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw
Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-patch-update-net-flaw/
-
Fortinet patches critical FortiOS flaws found with AI help
Fortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/26/fortinet-patches-critical-fortios-flaws-found-with-ai-help/
-
Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Major Updates
Kali Linux 2026.3 has been officially released, bringing six new security tools, updated image-building scripts, KDE Plasma 6.7, and major NetHunter improvements. Announced on October 26, 2026, this third release of the year includes 126 package updates and upgrades the Linux kernel from version 6.19 to 7.1.5.kali. This release focuses on customization, making it easier…
-
OpenBSD 8.0 Released With Enhanced Firewall Security and Critical Vulnerability Fixes
OpenBSD 8.0 was released on October 20, 2026, marking the project’s 61st release. This update includes significant improvements, including enhanced firewall security, memory-safety fixes, stronger validation for network daemons, and security updates to core components. Key updates include enhancements to PF, OpenBSD’s packet filtering firewall, as well as fixes for vulnerabilities related to virtualization, cryptographic…
-
Kali Linux 2026.3 released with 6 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/linux/kali-linux-20263-released-with-6-new-tools-desktop-updates/
-
Microsoft Issues Emergency .NET Security Updates to Fix Four Vulnerabilities
Microsoft released emergency out-of-band security updates addressing four vulnerabilities across .NET, including a Brotli buffer overflow and incomplete fixes from an earlier October release. The updates apply to .NET 8, .NET 9, .NET 10, and .NET 11 Release Candidate 3. Microsoft recommends updating as soon as possible. .NET Security Updates CVE-2026-111497 affects .NET’s implementation of…
-
Cloudflare Adds New WAF Rules to Detect Attacks Targeting CVE-2026-111497
Cloudflare announced an emergency release of its Web Application Firewall (WAF) on October 25, 2026. This update introduces two detection rules for the Brotli vulnerability tracked as CVE-2026-111497. These rules specifically target requests that declare Brotli body encoding and traffic accessing the Next.js image optimization endpoint. By default, both rules are enabled in Log mode,…
-
PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity
In an update, Palo Alto Networks Unit 42 said it’s retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws.”What researchers saw was an attack against a European government agency executed in the context of a vulnerable PHP application,” a spokesperson for the company told…
-
Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: A critical PHP security release is coming today, so get ready to update! The … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/25/week-in-review-php-vulnerabilities-patched-exploited-palo-alto-globalprotect-vpn-flaw/
-
OpenJDK unter Druck: 53 neue Sicherheitslücken markieren historischen Höchststand
Die vierteljährlichen OpenJDK-Updates, die die Fixes für diese CVEs enthalten, umfassen ausserdem mehr als 150 Codeänderungen ohne Sicherheitsbezug. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/openjdk-unter-druck-53-neue-sicherheitsluecken-markieren-historischen-hoechststand/a46913/
-
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine.The updater belongs to Time4Popcorn, an abandoned copy of Popcorn Time, a free…
-
Analysts Urge US to Follow UK’s Lead on Undersea Cable Law
UK Proposes Crisis Powers Over Cable Operators and Up to 14 Years for Sabotage. Security analysts say Washington should update its 1888 undersea cable law after London proposed letting ministers direct cable operators in a crisis and imposing prison terms of up to 14 years for sabotage – though some doubt tougher penalties would deter…
-
Windows Server 2016 reaches end of support in January
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-2016-reaches-end-of-support-in-january/
-
Windows Server 2016 reaches end of support in January
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-2016-reaches-end-of-support-in-january/
-
PHP shares mitigation for new RCE vulnerability with no patch
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/php-shares-mitigation-for-new-and-unpatched-rce-vulnerability/
-
UK proposes 14-year prison terms for undersea cable sabotage
In an era of hybrid threats, the British government wants to update the Submarine Telegraph Act 1885, which carries a maximum fine of £1,000 and five years’ imprisonment in cases of deliberate damage. First seen on therecord.media Jump to article: therecord.media/uk-undersea-cables-sabotage-new-sentencing-guidelines
-
Qualys-Update und erste Untersuchungen zu PHP2Shell in Zahlen Nahezu alle PHP-Installationen sind gefährdet
Um das Ausmaß der Gefährdung durch PHP2Shell (CVE-2026-109618 und CVE-2026-109619) zu messen, hat die Qualys-Threat-Research-Unit in den ersten Stunden nach Veröffentlichung anonymisierte Daten von 12.000 Kunden ausgewertet und die Ergebnisse zeigen, wie groß das Problem ist. Insgesamt wurden 167 Millionen PHP-Paketinstallationen gefunden, 73 % davon auf Systemen mit Internetzugang und damit in Reichweite von Angreifern…