📰 BleepingComputer
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. [...]
#CyberNews #Infosec
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. [...]
#CyberNews #Infosec
BleepingComputer
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell.
📰 BleepingComputer
ClickFix has never been bigger, and AI tools are its most convincing lure yet
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into executing malware. Push Security examines how these attacks evade traditional defenses and why AI tools have become increasingly effective lures. [...]
#CyberNews #Infosec
ClickFix has never been bigger, and AI tools are its most convincing lure yet
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into executing malware. Push Security examines how these attacks evade traditional defenses and why AI tools have become increasingly effective lures. [...]
#CyberNews #Infosec
BleepingComputer
ClickFix has never been bigger, and AI tools are its most convincing lure yet
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into executing malware. Push Security examines how these attacks evade traditional defenses and why AI tools have…
📰 Dark Reading
Decades-Old Windows Utility Powers Modern ClickFix Attack
The attack uses malicious Google search results related to Amazon and leverages the 'finger' utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
#CyberNews #Infosec
Decades-Old Windows Utility Powers Modern ClickFix Attack
The attack uses malicious Google search results related to Amazon and leverages the 'finger' utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
#CyberNews #Infosec
Dark Reading
Decades-Old Windows Utility Powers Modern ClickFix Attack
The attack uses malicious Google search results and leverages the 'finger' utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
🔴 CVE Digest — 21 Oct 2026
1 critical vulnerability
🔴 CVE-2026-114403 · CVSS 9.2
PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to...
#CVE #Critical #Vulnerability
1 critical vulnerability
🔴 CVE-2026-114403 · CVSS 9.2
PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-114403 - PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::load
PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted presentation file. Attackers can upload a ZIP containing PhpPresentation.xml that…
📰 Dark Reading
Optiv Launches CyberBOT Cybersecurity Awareness Training Program
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities.
#CyberNews #Infosec
Optiv Launches CyberBOT Cybersecurity Awareness Training Program
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities.
#CyberNews #Infosec
Dark Reading
Optiv Launches CyberBOT Cybersecurity Awareness Training Program
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness.
📰 Dark Reading
Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk
360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated.
#CyberNews #Infosec
Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk
360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated.
#CyberNews #Infosec
Dark Reading
Survey Finds High-Profile Executives Feel Untouchable
360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated.
🔴 CVE Digest — 21 Oct 2026
5 critical vulnerabilities
🔴 CVE-2026-111852 · CVSS 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax...
🔴 CVE-2026-111834 · CVSS 9.9
Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web...
🔴 CVE-2026-111832 · CVSS 10.0
Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a...
🔴 CVE-2026-109619 · CVSS 9.2
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be...
🔴 CVE-2026-109618 · CVSS 9.2
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some...
#CVE #Critical #Vulnerability
5 critical vulnerabilities
🔴 CVE-2026-111852 · CVSS 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax...
🔴 CVE-2026-111834 · CVSS 9.9
Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web...
🔴 CVE-2026-111832 · CVSS 10.0
Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a...
🔴 CVE-2026-109619 · CVSS 9.2
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be...
🔴 CVE-2026-109618 · CVSS 9.2
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-111852 - WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This issue affects Ajax Search Lite: from n/a through 4.14.6.
📰 BleepingComputer
OpenAI agents disabled safety monitoring, one lied about it
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so. [...]
#CyberNews #Infosec
OpenAI agents disabled safety monitoring, one lied about it
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so. [...]
#CyberNews #Infosec
BleepingComputer
OpenAI agents disabled safety monitoring, one lied about it
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so.
☁️ AWS Security Blog
Best practices for integrating IAM Roles Anywhere with your PKI
Using temporary credentials is a security best practice to reduce the risk from credentials getting compromised. With AWS IAM Roles Anywhere, now your workloads outside of Amazon Web Services (AWS) will be able to access AWS resources by obtaining temporary security credentials in AWS Identity and...
#AWS #CloudSecurity
Best practices for integrating IAM Roles Anywhere with your PKI
Using temporary credentials is a security best practice to reduce the risk from credentials getting compromised. With AWS IAM Roles Anywhere, now your workloads outside of Amazon Web Services (AWS) will be able to access AWS resources by obtaining temporary security credentials in AWS Identity and...
#AWS #CloudSecurity
Amazon
Best practices for integrating IAM Roles Anywhere with your PKI | Amazon Web Services
Using temporary credentials is a security best practice to reduce the risk from credentials getting compromised. With AWS IAM Roles Anywhere, now your workloads outside of Amazon Web Services (AWS) will be able to access AWS resources by obtaining temporary…
📰 Dark Reading
OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
#CyberNews #Infosec
OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
#CyberNews #Infosec
Dark Reading
OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
🔴 CVE Digest — 21 Oct 2026
7 critical vulnerabilities
🔴 CVE-2026-76475 · CVSS 9.3
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency...
🔴 CVE-2026-76474 · CVSS 9.8
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency...
🔴 CVE-2026-76473 · CVSS 9.8
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency...
🔴 CVE-2026-76466 · CVSS 9.8
A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote...
🔴 CVE-2026-20043 · CVSS 9.0
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3...
🔴 CVE-2026-111183 · CVSS 9.8
GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote...
🔴 CVE-2026-113788 · CVSS 9.4
Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a vulnerability in the `ssh`...
#CVE #Critical #Vulnerability
7 critical vulnerabilities
🔴 CVE-2026-76475 · CVSS 9.3
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency...
🔴 CVE-2026-76474 · CVSS 9.8
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency...
🔴 CVE-2026-76473 · CVSS 9.8
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency...
🔴 CVE-2026-76466 · CVSS 9.8
A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote...
🔴 CVE-2026-20043 · CVSS 9.0
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3...
🔴 CVE-2026-111183 · CVSS 9.8
GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote...
🔴 CVE-2026-113788 · CVSS 9.4
Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a vulnerability in the `ssh`...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-76475 - Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager…
📰 BleepingComputer
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...]
#CyberNews #Infosec
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...]
#CyberNews #Infosec
BleepingComputer
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.
📰 Dark Reading
'PHP2Shell' Bugs Signal Red Alert for Security Industry
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.
#CyberNews #Infosec
'PHP2Shell' Bugs Signal Red Alert for Security Industry
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.
#CyberNews #Infosec
Dark Reading
'PHP2Shell' Bugs Signal Red Alert for Security Industry
Critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 sparked emergency patching efforts after a disclosure leak.
🔴 CVE Digest — 21 Oct 2026
12 critical vulnerabilities
🔴 CVE-2026-111812 · CVSS 10.0
Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers...
🔴 CVE-2026-111811 · CVSS 9.4
Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the...
🔴 CVE-2026-114268 · CVSS 9.9
A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of...
🔴 CVE-2026-111816 · CVSS 9.3
Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the...
🔴 CVE-2026-111813 · CVSS 10.0
Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments...
🔴 CVE-2026-105944 · CVSS 10.0
Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and...
🔴 CVE-2025-31699 · CVSS 9.1
Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request...
🔴 CVE-2026-111809 · CVSS 9.3
Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or...
🔴 CVE-2026-111815 · CVSS 10.0
Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate...
🔴 CVE-2026-111814 · CVSS 10.0
Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one...
🔴 CVE-2026-89035 · CVSS 9.1
MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows...
🔴 CVE-2026-114493 · CVSS 9.2
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that...
#CVE #Critical #Vulnerability
12 critical vulnerabilities
🔴 CVE-2026-111812 · CVSS 10.0
Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers...
🔴 CVE-2026-111811 · CVSS 9.4
Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the...
🔴 CVE-2026-114268 · CVSS 9.9
A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of...
🔴 CVE-2026-111816 · CVSS 9.3
Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the...
🔴 CVE-2026-111813 · CVSS 10.0
Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments...
🔴 CVE-2026-105944 · CVSS 10.0
Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and...
🔴 CVE-2025-31699 · CVSS 9.1
Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request...
🔴 CVE-2026-111809 · CVSS 9.3
Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or...
🔴 CVE-2026-111815 · CVSS 10.0
Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate...
🔴 CVE-2026-111814 · CVSS 10.0
Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one...
🔴 CVE-2026-89035 · CVSS 9.1
MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows...
🔴 CVE-2026-114493 · CVSS 9.2
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-111812 - Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials
Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own credentials. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0…
📰 BleepingComputer
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware. [...]
#CyberNews #Infosec
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware. [...]
#CyberNews #Infosec
BleepingComputer
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware.
📰 Dark Reading
Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.
#CyberNews #Infosec
Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.
#CyberNews #Infosec
Dark Reading
Marvell, Microsoft & Oracle Work to Standardize Data Centers
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.
📰 Dark Reading
Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization.
#CyberNews #Infosec
Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization.
#CyberNews #Infosec
Dark Reading
Survey Finds DLP Often Detects Data Loss Only After It Happens
In research from Cloud Security Alliance, only 16% said DLP blocked most significant incidents before data left the organization.
📰 BleepingComputer
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers. [...]
#CyberNews #Infosec
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers. [...]
#CyberNews #Infosec
BleepingComputer
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.
📰 Dark Reading
TiDB Breach Exposes Flawed Cloud Security Assumptions
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
#CyberNews #Infosec
TiDB Breach Exposes Flawed Cloud Security Assumptions
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
#CyberNews #Infosec
Dark Reading
TiDB Breach Exposes Flawed Cloud Security Assumptions
Cloud providers may be storing sensitive customer data, without either party knowing it. But when there's a breach, the data comes home to roost.
🔴 CVE Digest — 21 Oct 2026
3 critical vulnerabilities
🔴 CVE-2026-96639 · CVSS 9.8
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation...
🔴 CVE-2026-114139 · CVSS 9.1
Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the...
🔴 CVE-2026-112408 · CVSS 9.4
Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python...
#CVE #Critical #Vulnerability
3 critical vulnerabilities
🔴 CVE-2026-96639 · CVSS 9.8
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation...
🔴 CVE-2026-114139 · CVSS 9.1
Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the...
🔴 CVE-2026-112408 · CVSS 9.4
Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-96639 - Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK…