Tag: vulnerability
-
Gentlemen Ransomware Hackers Hijack Legitimate Lenovo Drivers to Disable Security Software
The Gentlemen ransomware operation is abusing legitimate Lenovo and Safetica kernel drivers to terminate security software, weakening endpoint defenses before encryption. Acronis Threat Research Unit researchers identified two custom dropper samples during a recent incident, exposing how the group weaponizes vulnerable drivers rather than relying exclusively on conventional process termination commands The technique, known as…
-
Cloudflare Warns of Active Exploitation Attempts Against Two Leaked PHP Flaws
Cloudflare has issued a warning about emerging attacks targeting two critical PHP vulnerabilities. In response, the company has implemented emergency web application firewall (WAF) rules while developers await an official security release. The PHP Foundation has provided advance notice, assigning both vulnerabilities a CVSS v4 score of 9.2, indicating the urgent need for affected environments…
-
Google Chrome 156 Fixes 353 Security Vulnerabilities, Including 6 Critical Flaws
Google released Chrome version 156 to the stable channel for Windows, macOS, and Linux, addressing 353 security vulnerabilities, including six critical flaws. Announced on October 20, 2026, this update addresses memory corruption, use-after-free errors, input validation issues, and other weaknesses across various browser components. Google stated that the deployment will continue over the coming days…
-
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws
PHP will release emergency fixes for two critical RCE flaws rated 9.2, as researchers warn of potential risks to exposed and unsupported systems. PHP is preparing an emergency security release for two critical vulnerabilities that could let attackers execute code remotely on affected servers. The update is scheduled for today, October 21 at 14:00 UTC,…
-
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
Two critical vulnerabilities in PHP were leaked one day before their scheduled disclosure and security patches First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/critical-php-vulnerabilities-leaked/
-
Critical Fortinet FortiSIEM RCE Vulnerability Gets Public PoC Exploit, Allowing Unauthenticated Attacks
Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM. This vulnerability allows unauthenticated attackers to turn arbitrary file writes into remote code execution. Researcher Zach Hanley published a technical analysis on October 20, following Fortinet’s security advisory released on October 13. The vulnerability specifically affects the product’s gRPC communication…
-
Oracle Releases 1,295 Security Patches to Fix Critical Vulnerabilities Across Multiple Products
Oracle has released its October 2026 Critical Patch Update, which includes 1,295 new security patches across its enterprise portfolio. Published on October 20, the advisory addresses vulnerabilities in Oracle software as well as third-party components. Notably, it addresses critical flaws that attackers can exploit remotely without authentication. Affected products include databases, middleware, business applications, Java,…
-
Apache Tomcat Security Flaws Allow Attackers to Bypass Authentication and Expose User Data
Apache disclosed eight vulnerabilities in Tomcat, including authentication bypass, cross-user data exposure, insecure socket access, and cryptographic configuration failures. Of these, three are rated Important, and five are rated Low. Fixes are available in Tomcat versions 11.0.27, 10.1.61, and 9.0.123, depending on the affected version branch. These vulnerabilities affect specific components and configurations, not every…
-
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that’s collectively called Plex2Shell.The vulnerabilities are listed below – CVE-2026-96652 (CVSS score: 5.3) – Plex Media Server Server-Side Request Forgery (SSRF) First seen on thehackernews.com Jump to article:…
-
DevGuard: Open-source vulnerability management for the software supply chain
DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/21/devguard-open-source-vulnerability-management/
-
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulnerabilities that its security team has rated 9.2 on the CVSS v4.0 scale but has not described.Security researchers at watchTowr say the two flaws allow remote code execution. Only the four supported PHP branches, 8.2 through 8.5, can receive…
-
A critical PHP security release is coming today, so get ready to update!
The PHP security team has announced an urgent security release for Wednesday, 21 October 2026 at 14:00 UTC. The release fixes two vulnerabilities, each rated 9.2 (Critical) … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/21/php-security-release-announcement-october-2026/
-
Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk
The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0. This warning, published on October 20, 2026, advises administrators to prepare for immediate upgrades. Additionally, watchTowr has reported two potential remote code execution (RCE) vulnerabilities. However, PHP has not yet confirmed their identifiers or…
-
Exposure Management im Zeitalter der Frontier-KI: Warum Geschwindigkeit zum Sicherheitsfaktor wird
Wie verändert Frontier-KI das Exposure Management? Vier Anforderungen zeigen, wie Unternehmen Schwachstellen schneller bewerten und Risiken gezielt reduzieren. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/exposure-management-im-zeitalter-der-frontier-ki-warum-geschwindigkeit-zum-sicherheitsfaktor-wird/a46835/
-
PHP warns admins of two critical flaws, emergency patches coming tomorrow
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/php-warns-admins-of-two-critical-flaws-emergency-patches-coming-tomorrow/
-
FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024
The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks. First seen on therecord.media Jump to article: therecord.media/fbi-says-safepay-ransomware-gang-among-most-active-600-victims
-
Ransomware groups expand targeting of Palo Alto Networks vulnerability
Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ransomware-targeting-palo-alto-networks-vulnerability/833474/
-
EU cyber law won’t force fixes for fridge controllers hit in French attack
The EU’s Cyber Resilience Act that took effect last month only requires companies to fix vulnerabilities and issue free updates during a product’s support period, which manufacturers define. First seen on therecord.media Jump to article: therecord.media/eu-cyber-law-wont-force-fixes-for-fridges-in-french-attack
-
There’s only so much code: the rise in vulnerability numbers
The September Microsoft Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June average of 100 a month, that increase is staggering. Where did they come from? And what does the future look like? First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/theres-only-so-much-code-the-rise-in-vulnerability-numbers/
-
Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/opencode-quietly-patched-critical/
-
Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign
Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center, the company’s tool for downloading, installing … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/20/exploitation-siemens-software-center-vulnerability-cve-2026-110936/
-
Hackers Can Take Over WordPress Websites Without a Password Using Two Security Flaws
Hackers can compromise vulnerable WordPress websites without stealing passwords by chaining two security flaws in the platform’s core. Disclosed in July 2026, the chain involves CVE-2026-63030 and CVE-2026-60137. Unlike attacks dependent on vulnerable extensions, WP2Shell affects default WordPress installations without requiring a third-party plugin. Public exploit code and observed exploitation have made unpatched deployments an…
-
Hackers Exploit Zimbra Zero-Click Flaw to Take Control of Email Servers
Tags: authentication, control, cyber, data, email, exploit, flaw, hacker, injection, intelligence, Internet, microsoft, threat, vulnerabilityHackers are exploiting a command injection vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite. This vulnerability allows attackers to compromise internet-facing email servers without any user interaction. Microsoft Threat Intelligence has observed attackers deploying webshells, escalating privileges, collecting authentication secrets, and staging mailbox data across organizations in various regions and industries. Zimbra Zero-Click Flaw The >>zero-click<<…
-
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks.The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches, resulting in execution of malicious code with the same privileges as…
-
New RedAgents AI Platform Deploys Multiple Hacking Agents to Find and Exploit Vulnerabilities
RedAgents, a cloud platform that deploys multiple AI penetration testing agents against authorized targets to discover vulnerabilities and test attack paths. Announced on October 16, 2026, the service brings Artex Pro, Cyber(YanJi), Yanxun, and CyberStrikeAI Enterprise Edition into a single environment for security operations teams. The platform addresses a limitation of automated security assessments: different…
-
EUVD-2026-101420 / CVE-2026-76519 – Schwachstelle im Malware-Schutz von Cisco wird ausgenutzt
First seen on security-insider.de Jump to article: www.security-insider.de/cisco-secure-email-gateway-amp-schwachstelle-aktive-angriffe-a-5ddea88b41df727cb097967fa8f2f4a9/
-
Hackers Turn Aomei Update Servers Into Malware Channels
Five- to 10-Minute Attack Windows Complicated Detection and Forensic Analysis. Google linked a stealthy AOMEI supply chain attack to UNC7017, which briefly hijacked Backupper and AnyViewer update configurations to deliver Crossroad and Shinyroad malware across more than 10 countries without exploiting software vulnerabilities or compromising build pipelines. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/hackers-turn-aomei-update-servers-into-malware-channels-a-33147
-
Hackers Turn Aomei Update Servers Into Malware Channels
Five- to 10-Minute Attack Windows Complicated Detection and Forensic Analysis. Google linked a stealthy AOMEI supply chain attack to UNC7017, which briefly hijacked Backupper and AnyViewer update configurations to deliver Crossroad and Shinyroad malware across more than 10 countries without exploiting software vulnerabilities or compromising build pipelines. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/hackers-turn-aomei-update-servers-into-malware-channels-a-33147