Two days after PHP rolled out emergency fixes for the PHP2Shell vulnerabilities, threat actors have tried to use the flaws to spread a Mirai botnet. A security firm has also built an exploit that gets past a key memory protection,… Read More "Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge"
Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months
Networking solutions provider Arista Networks on Thursday rolled out patches for an exploited zero-day vulnerability in its centralized management tool VeloCloud Orchestrator (VCO). The critical-severity security defect is tracked as CVE-2026-114625 (CVSS score of 9.9) and is described as a… Read More "Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months"
PHP2Shell Exploitation Started Days Before Patches
Threat actors started probing for servers affected by two critical remote code execution (RCE) vulnerabilities in PHP four days before the fixes, Amazon reports. Patches for the two flaws, known as PHP2Shell and tracked as CVE-2026-109618 and CVE-2026-109619, were released… Read More "PHP2Shell Exploitation Started Days Before Patches"
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
PHP has rolled out patches for two critical-severity vulnerabilities named PHP2Shell that could provide attackers with unauthenticated remote code execution (RCE). The issues are tracked as CVE-2026-109618 (out-of-memory (OOM) corruption) and CVE-2026-109619 (stale global state) and have a CVSS score… Read More "PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors"
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
Siemens revealed on Monday that threat actors have exploited a vulnerability in Siemens Software Center as part of a malware campaign. Siemens Software Center handles the download, installation, activation and updating of software that customers have bought, and it can… Read More "Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks"
Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure
Threat actors began targeting Plex2Shell, a chain of four Plex Media Server vulnerabilities, one day after technical details and a working exploit went public. The researcher who found the Plex2Shell bugs released a write-up and proof-of-concept (PoC) code on October… Read More "Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure"
Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack
A suspected state-sponsored threat actor exploited multiple Fortinet vulnerabilities in an attack against a telecommunications organization, Palo Alto Networks reports. The intrusion, attributed to UNC5820 (tracked by Palo Alto Networks as CL-STA-0954), occurred in September 2024 and resulted in long-term… Read More "Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack"
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
A Chinese APT has been exploiting a BeyondTrust vulnerability as a zero-day since August as part of its state-sponsored espionage operations. The exploited flaw, tracked as CVE-2026-102764 (CVSS score of 9.3), is described as an improper validation of message origins… Read More "Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day"
Cisco Warns of Exploited Secure Email Gateway Vulnerability
Cisco on Wednesday warned customers that hackers have been exploiting a critical-severity vulnerability in Secure Email Gateway. Tracked as CVE-2026-76519 (CVSS score of 9.8/10), the security defect impacts the Advanced Malware Protection (AMP) feature of the appliance and could allow… Read More "Cisco Warns of Exploited Secure Email Gateway Vulnerability"
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
Palo Alto Networks on Wednesday informed customers that it has released patches for a PAN-OS zero-day vulnerability exploited in malicious attacks. The high-severity flaw is tracked as CVE-2026-0322 and it allows remote code execution. It affects the management interface of… Read More "Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution"