Cybersecurity News: Breaches, Ransomware & Zero-Days

10,207 stories · Updated every 5 minutes · Page 13 of 25

1. PHP2Shell: A Clear Explanation and Response Framework | UpGuard

   UpGuard Blog · 22 Oct 2026, 11:29 IST · Medium severity

   PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets unauthenticated attackers run code on PHP servers. Learn who’s affected and how to respond.

2. Choosing the Right Attack Surface Visibility Software | UpGuard

   UpGuard Blog · 22 Oct 2026, 08:23 IST · Medium severity

   Explore the top features of attack surface visibility software, why it matters for cybersecurity, and how to choose the right tool for your organization.

3. Threat Exposure Management Framework Explained | UpGuard

   UpGuard Blog · 22 Oct 2026, 08:23 IST · Medium severity

   Learn how threat exposure management (TEM) and CTEM work, how to implement them, and align these strategies with cybersecurity frameworks and tools.

4. What are the Main Differences Between Proxy Servers & VPNs? | UpGuard

   UpGuard Blog · 22 Oct 2026, 08:23 IST · Medium severity

   Learn the differences between VPNs and Proxy Servers to help you make the right cybersecurity decisions for your requirements.

5. What is a Brute Force Attack? | UpGuard

   UpGuard Blog · 22 Oct 2026, 08:23 IST · Medium severity

   Brute force attacks are a common and costly form of cyberattack that can be prevented. Learn about brute force attacks and how to prevent them in this post

6. MongoDB vs MySQL | UpGuard

   UpGuard Blog · 22 Oct 2026, 08:23 IST · Medium severity

   The MySQL vs MongoDB argument is in many ways a relational vs. Each one excels in certain scenarios and is ill-suited for others.

7. What is Exposure Management in Cybersecurity? | UpGuard

   UpGuard Blog · 22 Oct 2026, 08:23 IST · Medium severity

   Learn what exposure management is and how it could help your business.

8. Exposed Server Headers and Cybersecurity Risk | UpGuard

   UpGuard Blog · 22 Oct 2026, 08:23 IST · Medium severity

   Your HTTP response header carries server information. If exposed, that server information can increase your attack surface.

9. Choosing a Tech Attack Surface Management Product in 2026 | UpGuard

   UpGuard Blog · 22 Oct 2026, 08:23 IST · Medium severity

   Learn the features to look for in an ideal Attack Surface Management product optimized for the tech industry's unique cybersecurity risk profile.

10. PHP flaws trigger global scramble as hackers pounce

    TechCentral · 22 Oct 2026, 10:47 IST · Medium severity

    Cloudflare saw millions of exploit attempts after PHP vulnerabilities were disclosed.

11. China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack

    The Hacker News · 22 Oct 2026, 09:51 IST · Critical severity

    Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based...

12. eMudhra breach: Netizens react as IT Ministry says impact on Indian sites ‘very limited’

    Tech-Economic Times · 22 Oct 2026, 10:16 IST · Medium severity

    Cybersecurity agency CERT-In warned that the compromised keys could let attackers issue fraudulent certificates for domains they do not control, impersonate legitimate websites and carry out attacks that intercept or modify encrypted...

13. MeitY says eMudhra security incident had limited impact on Indian websites, probe underway

    Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · 22 Oct 2026, 09:29 IST · Medium severity

    The ministry clarified that the reported incident relates only to the second function, which operates internationally under a global trust framework and is subject to independent audits

14. Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

    Wired · 22 Oct 2026, 07:54 IST · Medium severity

    Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across the internet.

15. Chinese-linked hackers compromise ConnectWise, target hundreds in global attack, Microsoft says

    Tech-Economic Times · 22 Oct 2026, 07:39 IST · Medium severity

    A Chinese-linked hacking group used an AI-driven penetration testing tool to compromise IT services firm ConnectWise as part of a campaign that targeted hundreds of organizations globally, Microsoft said on Wednesday.

16. Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

    AWS Security Blog · 22 Oct 2026, 06:20 IST · Critical severity

    On October 21, 2026, the PHP project released emergency fixes for two critical remote code execution (RCE) vulnerabilities in the PHP core runtime, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively named PHP2Shell. Both...

17. Internet-Wide Threat Has Security Teams Scrambling to Patch PHP

    TechNewsWorld · 22 Oct 2026, 05:55 IST · Medium severity

    The risk of hackers exploiting the vulnerabilities to take over websites is so high that the NSA recommends organizations using PHP take affected systems offline if an immediate update is not feasible. The post Internet-Wide Threat Has...

18. USN-8890-2: libsoup vulnerabilities

    Ubuntu security notices · 22 Oct 2026, 03:06 IST · Medium severity

    USN-8890-1 fixed vulnerabilities in libsoup. This update provides the corresponding updates for libsoup3 on Ubuntu 26.10. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests.

19. Two critical PHP flaws put the web on alert as emergency patches arrive

    AI coding token costs are on track to rival human payroll | InfoWorld · 22 Oct 2026, 04:24 IST · Critical severity

    Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the internet. The flaws discovered in the PHP scripting language could allow attackers...

20. Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot

    AWS Security Blog · 22 Oct 2026, 04:06 IST · Medium severity

    Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP...

21. Chrome puts insecure sites behind a permission prompt

    Help Net Security · 22 Oct 2026, 04:00 IST · Medium severity

    Google has rolled out a change to Chrome that asks users for permission before making an insecure HTTP connection. The protection is now enabled by default for all users, following its introduction earlier this year for users of Safe...

22. PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

    Hacker News · 22 Oct 2026, 02:42 IST · Medium severity

23. Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

    BleepingComputer · 22 Oct 2026, 03:13 IST · Medium severity

    Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.

24. Two critical PHP flaws put the web on alert as emergency patches arrive

    CSO Online Security · 22 Oct 2026, 02:57 IST · Critical severity

    Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the internet. The flaws discovered in the PHP scripting language could allow attackers...

25. More Than 1.5 Million Canadian Crime Stoppers Tips Leaked

    Slashdot · 22 Oct 2026, 02:30 IST · Medium severity

    A CBC investigation found that more than 1.5 million Canadian Crime Stoppers tips spanning 25 years were exposed in a breach of the P3 Global Intel tip-management platform. About 850,000 records contained personally identifiable...

26. USN-8951-1: c-ares vulnerabilities

    Ubuntu security notices · 21 Oct 2026, 23:50 IST · Medium severity

    It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04...

27. AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

    Microsoft Security Blog · 21 Oct 2026, 23:53 IST · Critical severity

    In this article What’s happening What is ARTEX? Mitigation and protection guidance References Learn more As early as September 2026, Storm-0940, a China-state aligned actor, used the agentic AI penetration testing framework ARTEX to...

28. Lazarus hackers use post-quantum cryptography for malware delivery

    BleepingComputer · 22 Oct 2026, 02:01 IST · Medium severity

    North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware.

29. CISA Urges Immediate Patching of Critical PHP Flaws

    News – MeriTalk · 22 Oct 2026, 01:36 IST · Medium severity

    The Cybersecurity and Infrastructure Security Agency (CISA) on Oct. 21 warned organizations about critical vulnerabilities in the widely used PHP programming language that could allow attackers to remotely execute malicious code on...

30. Meta on the spot for $25 billion under New Mexico privacy ruling

    The Record by Recorded Future · 22 Oct 2026, 01:55 IST · Medium severity

    The Cambridge Analytica data privacy case from a decade ago is still weighing on Meta's finances.

31. OpenAI president urges AI safeguards as group he funds opposes regulation

    Tech-Economic Times · 22 Oct 2026, 00:38 IST · Medium severity

    OpenAI's safety practices have been in the spotlight in recent months, after the company said a swarm of its AI agents escaped containment and hacked into the AI platform Hugging Face. OpenAI President Greg Brockman was among the group...

32. Stopping PHP2SHELL: How SentinelOne Protects Customers from This Attack Technique

    SentinelOne Blog · 22 Oct 2026, 00:51 IST · Medium severity

    Executive Summary On October 21, 2026, the PHP project released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619 , both rated CVSS v4.0 9.2. The two flaws are known...

33. USN-8949-1: Ghostscript vulnerabilities

    Ubuntu security notices · 21 Oct 2026, 21:09 IST · Medium severity

    Rick de Jager discovered that Ghostscript incorrectly handled memory under certain circumstances when processing PostScript documents. If a user or automated system were tricked into processing a specially crafted document, an attacker...

34. The Missing Layer in Vulnerability Prioritization: Full Visibility Into Your Attack Surface

    Flashpoint · 22 Oct 2026, 00:20 IST · Medium severity

    Table Of Contents Table of Contents How EASM Extends Vulnerability Prioritization to Your Full Environment Why This Matters More in Regulated Industries Discovery and Prioritization, Built Into One Platform Frequently Asked Questions...

35. Democrat lawmakers say Russia is aiming to undermine party ahead of midterms

    The Record by Recorded Future · 21 Oct 2026, 23:58 IST · Medium severity

    The pair stressed the latest update showed no country is pursuing the technically challenging effort to interfere with or hack into the country’s election infrastructure or tamper directly with votes.

36. CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

    BleepingComputer · 22 Oct 2026, 00:04 IST · Medium severity

    Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.

37. LiteLLM supply chain attack hoovers up passwords and secrets

    The Register · 21 Oct 2026, 23:52 IST · Critical severity

    Unknown crims compromised LiteLLM's release process on Wednesday, distributing a malicious version (1.107.0) containing malware designed to steal cloud and AI credentials and a remote access trojan (RAT) capable of executing arbitrary...

38. USN-8950-1: poppler vulnerability

    Ubuntu security notices · 21 Oct 2026, 22:23 IST · Medium severity

    It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An attacker could possibly use this issue to cause a denial of service.

39. A train simulator game for console hackers

    Hacker News · 19 Oct 2026, 22:10 IST · Medium severity

40. LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

    The Hacker News · 21 Oct 2026, 23:31 IST · Critical severity

    The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise...