UPDATED
SecurityWeek · · Medium severity
Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on...
HackRead · · Medium severity
Research found 426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns…
AlienVault OTX · · Medium severity
Four months after Operation Endgame dismantled StealC in June, its seller returned in October with Stadia, a full-featured remote access trojan that incorporates StealC's code verbatim. Unlike its predecessor, Stadia offers...
AlienVault OTX · · Medium severity
In September 2026, an SEO poisoning campaign distributed Armorsteal malware through fake websites impersonating Chocolatey package manager and Microsoft Activation Scripts (MAS) tool. Victims searching for software installation commands...
AlienVault OTX · · Medium severity
VeloCloud Orchestrator (VCO) on-premises versions contain a critical SQL injection vulnerability that allows authenticated users with minimal privileges to escalate to superuser operator access. Any user with Enterprise Read Only role...
Seqrite Blog · · Critical severity
PHP2Shell affects how PHP handles a request that runs out of memory or encounters a fatal error. If the failure interrupts an operation before it finishes, PHP can leave an array entry only partly initialized or retain a pointer to...
Tahawul Tech · · Medium severity
Despite spending more time online and feeling confident in the digital world, Gen Z are less likely than other generations to use antivirus software for mobile devices or change passwords, according to new research conducted by...
Help Net Security · · Medium severity
An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The...
Infosecurity Magazine · · High severity
Japanese video games giant Capcom confirmed unauthorized access to its online account system
AlienVault OTX · · Critical severity
Two critical PHP remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated CVSS v4.0 9.2, leaked before their scheduled patch on October 21, 2026. The flaws involve out-of-memory corruption in PHP core...
AlienVault OTX · · Medium severity
Between July and September 2026, a sophisticated campaign targeted Microsoft 365 accounts through adversary-in-the-middle attacks and token replay techniques. The operation captured sign-in sessions via AiTM relays and replayed stolen...
AlienVault OTX · · Medium severity
TRUST#GRAFT is a sophisticated attack chain that exploits authenticated WordPress administrator browser sessions to deploy persistent PHP backdoors. The attack begins with JavaScript loaders that present fake Cloudflare-style...
AlienVault OTX · · Medium severity
On July 16th, 2025, UAC-0099 conducted a spearphishing attack against a Ukrainian grain logistics company, deploying the MATCHWOK backdoor. The following day, attackers introduced MythicRatatoskr, a previously undocumented Go-based...
The Hacker News · · Medium severity
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved UAC-0099 (aka...
The Hacker News · · Medium severity
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in...
AlienVault OTX · · Medium severity
SiriusQT is a Windows Remote Access Trojan advertised on dark web forums since April 2026, offering capabilities beyond remote administration including HVNC, credential theft, cryptocurrency wallet collection, clipboard monitoring,...
Hacker News · · Medium severity
IT Pro · · Medium severity
Ross Kelly is ITPro's News & Analysis Editor, with a keen interest in cyber security, business leadership and emerging technologies. He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro...
CSO Online Security · · Medium severity
Indian digital trust company eMudhra has announced that it is exiting the global SSL/TLS certificate business and is offering customers certificates issued by Sectigo as an alternative, following the compromise of private keys behind...
SecurityWeek · · Medium severity
The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments. The post China APT Uses AI Pentest Tool Artex in ConnectWise Attacks appeared first on SecurityWeek .
Malwarebytes Labs · · Medium severity
A breach exposed personal information in supposedly anonymous crime reports. Now one Crime Stoppers chapter has stopped accepting tips because it cannot guarantee anonymity. Toronto Crime Stoppers, which works with the community,...
The Hacker News · · Medium severity
Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images,...
Infosecurity Magazine · · High severity
Kroll found that 69% of data breach victims in the past year were affected by a third-party breach, with attacks on tech companies the most common cause
SecurityWeek · · Critical severity
The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges. The post Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months appeared first on...
Help Net Security · · High severity
Players who signed up for Capcom’s online account service may want to look twice at emails that seem to come from the company. The company has disclosed that a third party gained unauthorized access to customer information linked to...
TNW · · Medium severity
LiteLLM says hackers took the keys they needed from its own logs. They used them to publish a poisoned version of its software on Wednesday. The open-source AI gateway explained it in an incident report.
SecurityWeek · · High severity
The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts. The post 11 Million Impacted by Capcom Data Breach appeared first on SecurityWeek .
Help Net Security · · Medium severity
An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the computing power. Symantec captured the agent’s instruction set this...
TNW · · Medium severity
Japan plans to create a team of ethical hackers that will use AI to attack the country’s own systems and find vulnerabilities before criminals can exploit them. The announcement comes as banks, rail operators and government agencies...
SecurityWeek · · Critical severity
Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek .
The Hacker News · · Medium severity
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be...
The Hacker News · · Medium severity
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0...
CERT Polska · · Medium severity
Zespłół CERT Polska otrzymał zgłoszenia dotyczące 11 podatności (CVE-2025-30043 oraz od CVE-2025-30045 do CVE-2025-30047, od CVE-2025-30049 do CVE-2025-30054 i CVE-2025-58403) odkrytych w oprogramowaniu CGM CLININET.
Slashdot · · Medium severity
For the first time, the UN has declared that exceeding the Paris Agreement's 1.5C warming limit is "imminent and unavoidable." "We are now saying this window has closed, but we can open it again by making the overshoot as brief as...
SecurityWeek · · Medium severity
After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016. The post Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016 appeared first on SecurityWeek .
Medianama · · Medium severity
Cloud hosting platform Railway has urged all users to replace their API keys and other stored credentials after discovering a cyberattack that may have exposed sensitive customer data. In an October 21 blog post , the company said an...
UpGuard Blog · · Medium severity
Discover the best supplier risk management software in 2026, including UpGuard Vendor Risk, Bitsight, and Riskconect.
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · · Medium severity
The PHP glitches in the underlying code itself could enable attackers to use them to take control of web servers to steal data, distrupt services or move through networks, NSA warns
Tech-Economic Times · · Medium severity
Two critical security flaws in PHP, the programming language underpinning an estimated 70% of the internet, have triggered emergency cybersecurity measures in India. Banks are auditing applications and preparing backups, while the...
Gizmodo · · Medium severity
The Dutch learned a Russian intelligence agency had broken into Kushner's iPhone in 2017, so they borrowed the trick and started watching for themselves.
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free