π¨ Critical security issue affecting PHP π¨
π Read more.
π Via "UK NCSC"
----------
ποΈ Seen on @cibsecurity
Updated The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP CVE2026109618 and CVE2026109619.π Read more.
π Via "UK NCSC"
----------
ποΈ Seen on @cibsecurity
National Cyber Security Centre
Critical security issue affecting PHP
Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619).
π New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Researchers have uncovered Athena StealthRoute, a phishingasaservice platform featuring an AI Studio that generates phishing lures and decoy content designed to conceal attacks.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious
Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio
π Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Researchers at Symantec have uncovered an AI agent designed to operate a full cyberattack without human intervention.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Symantec Uncovers AI Agent Hijacking Models for Autonomous Attacks
Researchers at Symantec have uncovered an AI agent designed to operate a full cyber-attack without human intervention
π Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks and both are evolving their tactics in an attempt to outdo one another.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy
Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks - and both are evolving their tactics in an attempt to outdo one another
π SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
A new CISA advisory warns of the threat posed by SafePay to businesses and critical infrastructure, and urges defenders to take action to mitigate the groups tactics.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide,
A new CISA advisory warns of the threat posed by SafePay to businesses and critical infrastructure, and urges defenders to take action to mitigate the groupβs tactics
π Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Two critical vulnerabilities in PHP were leaked one day before their scheduled disclosure and security patches.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patch
Two critical vulnerabilities in PHP were leaked one day before their scheduled disclosure and security patches
β€1π1
π Childrenβs Data Stolen After Ransomware Attack Compromises βPassword1β Account π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Childrenβs Data Stolen After Ransomware Attack Compromises βPassword1β
The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident
β€1
π’ A spate of cyber attacks has rocked Japan π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
With over 100 cyber attacks impacting major sectors this year, Japans ruling party is calling for an emergency taskforce to strengthen AI defenses.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
IT Pro
A spate of cyber attacks has rocked Japan β and it's spooked lawmakers
With over 100 cyber attacks impacting major sectors this year, Japanβs ruling party is calling for an emergency taskforce to strengthen AI defenses
ποΈ Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target. The findings were.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
β€1π1
ποΈ PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Threat actors have been observed using agentic artificial intelligence AI platforms for postexploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE2026109618 and CVE2026109619. "In one case, the attackers targeted a government entity in Europe and within two hours of the initial exploitation they had successfully accessed password hashes and multifactor.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning RL training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we believe the responsible approach is to conduct frontier model training with no.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π’ Thales Imperva Cloud WAF π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
Sophisticated web application firewall that's a breeze to deploy, packed with sophisticated security features, and ideally suited to enterprises.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
IT Pro
Thales Imperva Cloud WAF review: Keeping the bad actors out of your corporate websites
Sophisticated web application firewall that's a breeze to deploy, packed with sophisticated security features, and ideally suited to enterprises
π΅οΈββοΈ 10 Software Security Practices Built for the Next 250 Years π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
10 Software Security Practices Built for the Next 250 Years
This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond the vulnerability.
β€1
π¦Ώ Your Older Android Phone Is Getting a New Scam Defense β Hereβs What Google Changed π¦Ώ
π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
Google is extending scamcall protection to Android 15 and earlier, adding safeguards against malicious apps that abuse accessibility permissions. The post Your Older Android Phone Is Getting a New Scam Defense Heres What Google Changed appeared first on TechRepublic.π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
TechRepublic
Your Older Android Phone Is Getting a New Scam Defense β Here's What Google Changed - TechRepublic
Google is bringing scam-call protection to older Android phones. Learn which versions qualify, how the safeguard works, and how to check for updates.
ποΈ β‘ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they can keep up with. And that's not even the full story. A leaked key led to a software supplychain.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first need a vulnerable Wasmtime build to compile a module they control, and one of the flaws affects only ARM64 systems. Fixed versions were released on.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response NDR platform, connects individual alerts into one timeline, and it feeds the defensive systems that can tie all events together into one coordinated view. SOC teams often first see the shape of an intrusion.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the kit makers' own container app. The kit's Telegram part matches Baohuo, a backdoor that Doctor.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversaryinthemiddle AitM relay to capture signin sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 signin events across.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz. A GitHub safeguard that pauses.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity