PHP2Shell target list: 216 hosts, plus a new PHP flaw
Tag: CyberMaterial
uCreator Android Spyware Targets Telegram, WeChat
Security researchers have discovered a commercial Android spyware toolkit called uCreator that targets users of Telegram and WeChat messaging platforms.
PHP RCE Flaw CVE-2026-115560 Mitigation Guidance
PHP maintainers have disclosed CVE-2026-115560, a remote code execution vulnerability that affects a limited subset of PHP installations due to specific…
Microsoft 365 Token-Replay Campaign Hits 79 Orgs
A sophisticated cyberattack campaign has successfully breached Microsoft 365 email accounts across 79 organizations by capturing and replaying…
South Korea Busts AI-Powered Cybercrime Ring
Police in South Korea have dismantled what authorities describe as the country’s first large-scale cybercrime operation powered by generative AI,…
Kali Linux 2026.3 released with new tools
Offensive Security has released Kali Linux 2026.3, marking the third quarterly update to the popular penetration testing distribution in 2026.
PHP2Shell: North Korean campaign targets 216 vulnerable host
Cyfirma researchers have linked a coordinated scanning campaign against 216 vulnerable hosts to a suspected North Korean threat group exploiting two…
Anthropic details Claude Duet security safeguards
Anthropic has released technical documentation describing the security controls built into Claude Duet, its proactive AI agent designed to monitor…
Prince of Persia (Infy)
Iran’s Quietest Spy Crew
Google Gemini AI gains personal intelligence in Android Auto
Google has expanded Gemini AI capabilities in Android Auto and vehicles with Google built-in by integrating Personal Intelligence features that access…
CYBER BRIEFING | October 22, 2026
PHP RCE pair hits 9.2: patch now or pull sites offline
GitLab Max Severity Code Execution Flaw
GitLab has issued emergency security patches addressing a maximum-severity vulnerability in its Regular Expression Compiler component that enables remote…
US DHS Bans DeepSeek AI From Government Systems
The U.S.
Critical PHP vulnerabilities patched today
PHP developers are releasing emergency security patches today to address two critical vulnerabilities in the widely-used programming language that powers…
CYBER BRIEFING | October 21, 2026
Signal call flaw, 333 Tor exits hijacked, AI plans OT attacks
CoreWeave launches Zero Trust AI Framework
CoreWeave announced its Zero Trust AI Framework at Nvidia GTC Berlin, introducing a security model that shifts control of AI workload protection from the…
AI-Built Websites Leaking Live API Keys
A month-long scan of newly registered domains has revealed that dozens of AI-generated websites are shipping live API credentials in their public…
SentinelOne launches AI agent detection tool
SentinelOne has introduced Singularity Agentic Detection and Response (ADR), a security solution targeting the emerging challenge of AI agent oversight…
Eiliko Robot Toy Exposed User Data
A popular AI-powered robot toy called Eiliko has been found to contain critical security vulnerabilities that exposed users’ complete conversation…
Qilin ransomware suspect arrested; linked to Synnovis hack
German law enforcement has arrested a 28-year-old Russian national suspected of playing a key role in the Qilin ransomware operation.