UK NCSC

PHP2Shell: Critical PHP vulnerabilities patched, update now!

Cloudflare, CVE, CVSS, cybersecurity, Don't miss, Hot stuff, News, patch, PHP, security update, UK NCSC, vulnerability /

PHP2Shell: Critical PHP vulnerabilities patched, update now! 2026-10-21 at 16:51 By Mirko Zorz The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and […]

PHP2Shell: Critical PHP vulnerabilities patched, update now! Read More »

Suspected Iran-linked attack knocked UK power plant offline for days

critical infrastructure, cyberattack, Don't miss, energy sector, Hot stuff, News, UK, UK NCSC /

Suspected Iran-linked attack knocked UK power plant offline for days 2026-08-24 at 17:22 By Zeljka Zorz News that suspected Iranian hackers caused the shutdown of a British power plant broke over the weekend, raising the question of whether UK’s power grid and, indeed, the country’s critical infrastructure can fend off destructive cyber attacks. According to […]

Suspected Iran-linked attack knocked UK power plant offline for days Read More »

CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance

CISA, Don't miss, GitGuardian, guide, Hot stuff, JPCERT/CC, NCSC-NL, News, NSA, UK NCSC, vulnerability disclosure /

CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance 2026-07-16 at 16:23 By Zeljka Zorz On Wednesday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and four allied cyber authorities published a guide telling software vendors how to build a coordinated vulnerability disclosure (CVD) program. Six days earlier, CISA published a blog post […]

CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance Read More »

Scroll to Top