Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
CISA adds two Ivanti Connect Secure vulnerabilities to KEV that are used in an exploit chain to obtain root access
On October 30, 2026, CISA added two Ivanti Connect Secure vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog. Vulnerabilities CVE-2026-111357 ...
PHP2Shell — millions of exploitation attempts for CVE-2026-109618 and CVE-2026-109619 have not yet led to confirmed compromises
Two critical vulnerabilities in the PHP core — CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2) — triggered a wave of scanning ...
CVE-2026-111497 in the Brotli decoder: PHP and Microsoft release emergency updates
The critical vulnerability CVE-2026-111497 in Google’s Brotli decoder continues to trigger a wave of emergency updates. After the initial patches ...
Fortinet investigates the impact of 10 Node.js vulnerabilities on its product line — CVE-2026-111497 already in CISA KEV
On October 26, 2026, Fortinet published advisory FG-IR-26-187, which lists ten Node.js vulnerabilities affecting the 22.x, 24.x and 26.x branches. ...
CISA adds PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 to KEV: active exploitation confirmed
On October 26, 2026, CISA added two critical PHP vulnerabilities — CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell — to ...
PHP warns of new remote code execution vulnerability CVE-2026-115560 two days after emergency PHP2Shell fixes
On October 23, the PHP Foundation published an information notice about a new remote code execution vulnerability — CVE-2026-115560. The ...
16-year-old vulnerability in EDK II PXE UEFI firmware allows code execution before Secure Boot during network boot
The critical buffer overflow vulnerability CVE-2026-97631 in the EDK II PXE driver — the open-source codebase underlying the UEFI firmware ...
Virtualine domain seizure operation: what is known about shutting down bulletproof hosting infrastructure
On October 27, 2026, the U.S. Department of Justice announced the seizure of the virtualine.net domain, which belonged to a ...
Magento online store infection campaign: 953 victims, scanner evasion and persistence via localStorage
The Dutch company Sansec reports a large-scale campaign in which attackers have infected 953 online stores, mainly running on the ...
Anthropic claims an unreleased Claude model chained Chrome, Safari, Windows and Linux vulnerabilities into working exploits
Anthropic has published a study claiming that an unreleased internal Claude model discovered vulnerabilities in Google Chrome, Safari, Android, Windows ...
