Vulnerabilities

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

Data Protection, GoAhead, TLS, Vulnerabilities, vulnerability, web server /

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices 2026-10-28 at 15:10 By Eduard Kovacs FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers. The post TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices […]

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices Read More »

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

China, exploited, PHP2Shell, Vulnerabilities /

China-Linked Hackers Exploit PHP2Shell to Root Firewalls 2026-10-28 at 14:00 By Ionut Arghire The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

China-Linked Hackers Exploit PHP2Shell to Root Firewalls Read More »

Long-Hidden Flaws Patched in EPICS Research Facility Control Software

EPICS, ICS, ICS/OT, Vulnerabilities, vulnerability /

Long-Hidden Flaws Patched in EPICS Research Facility Control Software 2026-10-28 at 12:48 By Eduard Kovacs Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs. The post Long-Hidden Flaws Patched in EPICS Research Facility Control Software appeared first on SecurityWeek. This article is an excerpt […]

Long-Hidden Flaws Patched in EPICS Research Facility Control Software Read More »

Hackers Start Probing Fresh Oracle EBS Vulnerability

E-Business Suite, EBS, exploited, Oracle, Vulnerabilities, vulnerability /

Hackers Start Probing Fresh Oracle EBS Vulnerability 2026-10-28 at 11:14 By Ionut Arghire CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Hackers Start Probing Fresh Oracle EBS Vulnerability Read More »

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

Brotli, exploited, Featured, Malware & Threats, Node2Shell, Vulnerabilities, vulnerability /

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts 2026-10-28 at 10:37 By Eduard Kovacs CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek. This […]

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts Read More »

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

controversy, Featured, SSH, Tailscale, Tailworm, Vulnerabilities, vulnerability /

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws 2026-10-27 at 17:26 By Eduard Kovacs Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released. The post Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws appeared first on SecurityWeek. This article is […]

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws Read More »

HPE Patches Dozens of Critical Flaws in Networking Products

Aruba, HPE, patches, Vulnerabilities, vulnerability /

HPE Patches Dozens of Critical Flaws in Networking Products 2026-10-27 at 15:13 By Ionut Arghire Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches Dozens of Critical Flaws in Networking Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

HPE Patches Dozens of Critical Flaws in Networking Products Read More »

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

apple, Featured, iOS, macOS, Mobile & Wireless, patches, Vulnerabilities, vulnerability /

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 2026-10-27 at 13:49 By Eduard Kovacs Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones. The post iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to […]

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 Read More »

This is Fine: What NetScaler Zero-Days Tell Us about the New Normal

Citrix, Incident Response, NetScaler, Vulnerabilities /

This is Fine: What NetScaler Zero-Days Tell Us about the New Normal 2026-10-27 at 12:02 By Tod Beardsley Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon. The post This is Fine: What NetScaler Zero-Days Tell Us about the New Normal appeared first on SecurityWeek. This article […]

This is Fine: What NetScaler Zero-Days Tell Us about the New Normal Read More »

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Blue Initiative, Featured, ICS, ICS/OT, OT, port, ship, Vulnerabilities, vulnerability, vulnerability index /

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems 2026-10-27 at 09:14 By Eduard Kovacs Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products. The post Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems appeared first on SecurityWeek. This […]

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems Read More »

PHP2Shell Exploitation Moves From Probes to Working Shells 

exploited, Featured, PHP, PHP2Shell, Vulnerabilities, vulnerability /

PHP2Shell Exploitation Moves From Probes to Working Shells  2026-10-26 at 15:30 By Eduard Kovacs Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24. The post PHP2Shell Exploitation Moves From Probes to Working Shells  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

PHP2Shell Exploitation Moves From Probes to Working Shells  Read More »

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Broccoli2Shell, Brotli, Featured, HTTP2Shell, Node2Shell, Vulnerabilities, vulnerability /

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages 2026-10-26 at 12:21 By Eduard Kovacs An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution. The post Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages appeared first on SecurityWeek. This article is […]

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages Read More »

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

exploited, Mirai, PHP, PHP2Shell, Vulnerabilities, vulnerability /

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge 2026-10-23 at 15:45 By Eduard Kovacs Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek. […]

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge Read More »

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months

Arista, exploited, Vulnerabilities, vulnerability, Zero-Day /

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months 2026-10-23 at 12:58 By Ionut Arghire The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges. The post Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months Read More »

Atlassian Patches 75 Flaws in Data Center and Server Products

Atlassian, patch, Vulnerabilities, vulnerability /

Atlassian Patches 75 Flaws in Data Center and Server Products 2026-10-23 at 10:54 By Eduard Kovacs Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components. The post Atlassian Patches 75 Flaws in Data Center and Server Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Atlassian Patches 75 Flaws in Data Center and Server Products Read More »

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Mobile & Wireless, Signal, Vulnerabilities, vulnerability /

Signal Vulnerability Lets Malicious Callers Block Hang-Ups 2026-10-22 at 17:55 By Ionut Arghire Affecting the open source calling library RingRTC, the bug prevented calls from ending properly. The post Signal Vulnerability Lets Malicious Callers Block Hang-Ups appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Signal Vulnerability Lets Malicious Callers Block Hang-Ups Read More »

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Incident Response, PHP, PHP2Shell, security product vulnerability, security products, Vulnerabilities /

Tech and Security Companies Respond to PHP2Shell Vulnerabilities 2026-10-22 at 15:20 By Eduard Kovacs Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching. The post Tech and Security Companies Respond to PHP2Shell Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Tech and Security Companies Respond to PHP2Shell Vulnerabilities Read More »

PHP2Shell: Critical RCE Vulnerabilities Affect a Large Majority of Web Servers

Artificial Intelligence, Emerging Threats, News, Vulnerabilities /

PHP2Shell: Critical RCE Vulnerabilities Affect a Large Majority of Web Servers 2026-10-22 at 15:18 By Karl Sigler On October 21st, two critical memory manipulation vulnerabilities were disclosed in a joint announcement by Wiz Research, Calif, OpenAI, and the PHP team. The two vulnerabilities, combined, are being called PHP2Shell. The vulnerabilities are in PHP Core, which […]

PHP2Shell: Critical RCE Vulnerabilities Affect a Large Majority of Web Servers Read More »

Splunk, SolarWinds Release Fresh Security Updates

patches, SolarWinds, Splunk, Vulnerabilities, vulnerability /

Splunk, SolarWinds Release Fresh Security Updates 2026-10-22 at 13:45 By Ionut Arghire Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information. The post Splunk, SolarWinds Release Fresh Security Updates appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Splunk, SolarWinds Release Fresh Security Updates Read More »

Cisco Patches 34 Vulnerabilities Across Multiple Products

Cisco, patch, Vulnerabilities, vulnerability /

Cisco Patches 34 Vulnerabilities Across Multiple Products 2026-10-22 at 13:05 By Ionut Arghire Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks. The post Cisco Patches 34 Vulnerabilities Across Multiple Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches 34 Vulnerabilities Across Multiple Products Read More »

Scroll to Top