CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.
Category: EN
GM cracks the petty cash box for multistate driver tracking settlement
$220 million? For all of you? Yeah, we can probably dig that up …
North Korean Hackers Steal $6.36 Billion From Binance in Largest Crypto Hack Ever
North Korea’s TraderTraitor group drained about $6.36 billion from Binance wallets across ten blockchains on October 29, 2026. TRM Labs, which published…
Claude Model Builds Exploits Across Major Browsers & OSes
An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in…
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The…
Insurance industry fears potential impacts from PHP2Shell
A systemic cyber event could lead to billions of dollars in claims that exceed current risk models.
TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer…
Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
A Ukrainian man who carried out ransomware attacks for both the Nefilim and Hive gangs, including attacks on law firms and a healthcare provider during…
Anthropic: That Claude Code extension compromise… couldn’t be us
Claudeshop fingers ‘malicious actor’ in targeted supply-chain attack on Cursor
Claude Builds Five Exploit Chains Targeting Chrome, Safari, Windows, and Linux
Anthropic’s Claude built exploit chains against Chrome, Safari, Windows, and Linux, and extracted files from a locked Pixel 9 during controlled security…
Yet Another ClickFix Campaign, (Wed, Oct 28th)
Introduction
Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
The state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on…
NVIDIA SkillSpector: Complete Security Scanner for AI Agent Skills & MCP
As developers increasingly rely on autonomous AI agents to write code, manage infrastructure, and execute complex workflows, third-party…
When AI Guardrails Expose Vulnerabilities
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: When AI Guardrails Expose Vulnerabilities
Hacktivists Dump Records of 41,000 DHS Employees, Citing ICE Escalation
A hacktivist group has published internal records identifying more than 41,000 Department of Homeland Security employees and contractors, in what security…
CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE
IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by…
Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of…
ISC2 Launches New AI Security Certification as Cyber Skills Demands Grow
As artificial intelligence becomes more widely adopted, cybersecurity professionals are facing growing pressure to develop new skills, understand emerging…
Sony’s So-net Breach Exposes 2.59 Million Customer Records
Sony’s So-net breach exposed 2.59 million customer records and 54,401 email passwords. Learn what was leaked and how to protect accounts from follow-on…