Railway says intruder may have accessed customer secrets https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html Law enforcement…
Tag: Patch & Updates
October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability
Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital…
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the…
Critical Unpatched Linux Kernel Vulnerabilities Accidentally Disclosed, Including Two Remote Code Execution Flaws
In October, several unpatched Linux vulnerabilities were disclosed on public mailing lists, revealing technical details before fixes were widely…
Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List
Several unpatched Linux-related security flaws were posted to public mailing lists in October, exposing technical details before fixes were ready. The…
Why It’s Urgent to Update PHP on Your WordPress Site: Two Critical PHP Vulnerabilities and What Our Testing Found
Two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, can allow unauthenticated code execution. Updating WordPress won’t fix them. Update and…
Two critical PHP flaws put the web on alert as emergency patches arrive
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the…
Oracle Patches 1,209 Security Flaws, Including Six CVSS 10.0 Bugs
Oracle’s October 2026 update fixes 1,209 vulnerabilities, including six CVSS 10.0 flaws. See the affected products and what security teams should patch…
AI agents behind ConnectWise breach, PHP2Shell exploited days before patches, Japanese cloud hack
PHP Exploited Before Patch, Unpatched Linux SMB Bugs, GitLab Max-Severity Fix, and AI Agents in ConnectWise & Japan Breaches Cybersecurity Today (Oct. 23,…
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues,…
OSCP+ Scoring Update: What You Need to Know
Learn all about scoring updates to the OSCP exam that are starting on December 1, 2026.
Microsoft Warns Windows Server Updates May Disrupt Exchange Email — Here’s the Workaround
Microsoft’s October Windows Server updates may disrupt Exchange email. Here’s what administrators need to know about the temporary workaround.
PHP2Shell Update: One in ten organizations impacted as Europe bears the brunt
Two critical vulnerabilities in PHP, the programming language behind a large share of the world’s websites, online stores and internet services, are being…
PSA: PHP Security Updates Available for Two Critical Vulnerabilities, Update Now
The PHP project has released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that can…
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem…
Threat Brief: Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257.
PHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatched
Websites down as precaution as exploits have already been published
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server.…
PHP2Shell: Why many websites had to go offline for emergency security updates
Websites are temporarily going offline as admins address two critical PHP flaws that could let attackers run malicious code on their servers.