exploited

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress

exploited, Malware & Threats, Palo Alto Networks, PHP, PHP2Shell, Vulnerabilities, vulnerability, WordPress /

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress 2026-10-30 at 17:09 By Ionut Arghire Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week. The post PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress appeared first on SecurityWeek. This article […]

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress Read More »

Fresh WordPress Vulnerability in Attackers’ Crosshairs

exploited, Vulnerabilities, vulnerability, WordPress /

Fresh WordPress Vulnerability in Attackers’ Crosshairs 2026-10-30 at 14:04 By Ionut Arghire Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution. The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Fresh WordPress Vulnerability in Attackers’ Crosshairs Read More »

Drupal Commerce Core Vulnerability Exploited Against Online Stores 

Drupal, exploited, Vulnerabilities, Zero-Day /

Drupal Commerce Core Vulnerability Exploited Against Online Stores  2026-10-30 at 13:07 By Eduard Kovacs Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. The post Drupal Commerce Core Vulnerability Exploited Against Online Stores  appeared first on SecurityWeek. This article is an excerpt […]

Drupal Commerce Core Vulnerability Exploited Against Online Stores  Read More »

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

Alpine Linux, CISA KEV, exploited, GitLab, Vulnerabilities /

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux 2026-10-30 at 11:32 By Ionut Arghire Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux Read More »

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network

China, China APT, Cisco, exploited, Malware & Threats, Nation-State, SD-WAN, Silent Train, Volt Typhoon, Vulnerabilities, Zero-Day /

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network 2026-10-29 at 12:29 By Eduard Kovacs Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed. The post Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network appeared first on SecurityWeek. This article is an […]

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network Read More »

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Cisco, exploited, Vulnerabilities, vulnerability /

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August 2026-10-29 at 11:47 By Eduard Kovacs Cisco on Wednesday released fixes for an exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. Tracked as CVE-2026-76418 and assigned a CVSS score of 8.6, the bug resides in the Remote […]

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August Read More »

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

ESXi, exploited, Featured, VMWare, VMware ESXi, Vulnerabilities, vulnerability, Zero-Day /

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day 2026-10-29 at 10:01 By Ionut Arghire CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged. The post Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day Read More »

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

China, exploited, PHP2Shell, Vulnerabilities /

China-Linked Hackers Exploit PHP2Shell to Root Firewalls 2026-10-28 at 14:00 By Ionut Arghire The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

China-Linked Hackers Exploit PHP2Shell to Root Firewalls Read More »

Hackers Start Probing Fresh Oracle EBS Vulnerability

E-Business Suite, EBS, exploited, Oracle, Vulnerabilities, vulnerability /

Hackers Start Probing Fresh Oracle EBS Vulnerability 2026-10-28 at 11:14 By Ionut Arghire CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Hackers Start Probing Fresh Oracle EBS Vulnerability Read More »

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

Brotli, exploited, Featured, Malware & Threats, Node2Shell, Vulnerabilities, vulnerability /

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts 2026-10-28 at 10:37 By Eduard Kovacs CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek. This […]

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts Read More »

PHP2Shell Exploitation Moves From Probes to Working Shells 

exploited, Featured, PHP, PHP2Shell, Vulnerabilities, vulnerability /

PHP2Shell Exploitation Moves From Probes to Working Shells  2026-10-26 at 15:30 By Eduard Kovacs Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24. The post PHP2Shell Exploitation Moves From Probes to Working Shells  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

PHP2Shell Exploitation Moves From Probes to Working Shells  Read More »

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

exploited, Mirai, PHP, PHP2Shell, Vulnerabilities, vulnerability /

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge 2026-10-23 at 15:45 By Eduard Kovacs Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek. […]

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge Read More »

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months

Arista, exploited, Vulnerabilities, vulnerability, Zero-Day /

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months 2026-10-23 at 12:58 By Ionut Arghire The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges. The post Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months Read More »

PHP2Shell Exploitation Started Days Before Patches

exploited, Featured, PHP, PHP2Shell, Vulnerabilities /

PHP2Shell Exploitation Started Days Before Patches 2026-10-22 at 12:48 By Ionut Arghire Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell Exploitation Started Days Before Patches Read More »

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

exploited, Featured, PHP, PHP2Shell, Vulnerabilities, vulnerability /

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors 2026-10-21 at 19:50 By Ionut Arghire Several cybersecurity companies saw exploitation attempts before PHP released the patches. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors Read More »

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks

DLL hijacking, exploited, Featured, ICS/OT, Malware, Malware & Threats, Siemens, Vulnerabilities, vulnerability /

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks 2026-10-19 at 21:15 By Eduard Kovacs Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures. The post Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks appeared first on SecurityWeek. This article is an excerpt […]

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks Read More »

Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

exploited, Plex, Vulnerabilities /

Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure 2026-10-19 at 15:44 By Eduard Kovacs Threat actors have been observed delivering cryptocurrency miners and proxy software. The post Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure Read More »

Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack

exploited, Fortinet, PeerStitch, Telecom, Vulnerabilities, vulnerability /

Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack 2026-10-19 at 14:13 By Ionut Arghire The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack Read More »

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

BeyondTrust, China, China APT, exploited, Vulnerabilities, vulnerability, Zero-Day /

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day 2026-10-16 at 13:53 By Ionut Arghire Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day Read More »

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

exploited, firewall, Palo Alto Networks, PAN-OS, Vulnerabilities, Zero-Day /

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution 2026-10-15 at 09:59 By Eduard Kovacs The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution appeared first on SecurityWeek. This article is an […]

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution Read More »

Scroll to Top