PHP2Shell Exploitation Started Days Before Patches 2026-10-22 at 12:48 By Ionut Arghire Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
PHP2Shell Exploitation Started Days Before Patches Read More »
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU 2026-10-22 at 10:38 By Eduard Kovacs Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU Read More »
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors 2026-10-21 at 19:50 By Ionut Arghire Several cybersecurity companies saw exploitation attempts before PHP released the patches. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors Read More »
Memory Bugs Account for Most of Chrome’s 353 New Security Fixes 2026-10-21 at 15:57 By Ionut Arghire The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities. The post Memory Bugs Account for Most of Chrome’s 353 New Security Fixes appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Memory Bugs Account for Most of Chrome’s 353 New Security Fixes Read More »
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws 2026-10-21 at 11:02 By Ionut Arghire Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. The post PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws Read More »
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks 2026-10-19 at 21:15 By Eduard Kovacs Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures. The post Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks appeared first on SecurityWeek. This article is an excerpt […]
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks Read More »
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw 2026-10-19 at 18:47 By Ionut Arghire Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules. The post Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw appeared first on SecurityWeek. This article is an […]
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw Read More »
Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure 2026-10-19 at 15:44 By Eduard Kovacs Threat actors have been observed delivering cryptocurrency miners and proxy software. The post Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure Read More »
Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack 2026-10-19 at 14:13 By Ionut Arghire The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack Read More »
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day 2026-10-16 at 13:53 By Ionut Arghire Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day Read More »
F5, Juniper Networks Patch Critical Vulnerabilities 2026-10-16 at 12:54 By Ionut Arghire Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post F5, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
F5, Juniper Networks Patch Critical Vulnerabilities Read More »
Microsoft Patches Two Dozen RCE Flaws in Office 2026-10-16 at 10:55 By Ionut Arghire In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office. The post Microsoft Patches Two Dozen RCE Flaws in Office appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Microsoft Patches Two Dozen RCE Flaws in Office Read More »
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution 2026-10-15 at 09:59 By Eduard Kovacs The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution appeared first on SecurityWeek. This article is an […]
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution Read More »
Cisco Warns of Exploited Secure Email Gateway Vulnerability 2026-10-15 at 09:34 By Ionut Arghire Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Cisco Warns of Exploited Secure Email Gateway Vulnerability Read More »
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise 2026-10-14 at 10:38 By Ionut Arghire Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise Read More »
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products 2026-10-14 at 10:26 By Ionut Arghire Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products Read More »
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day 2026-10-14 at 10:16 By Eduard Kovacs The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek. This article is an excerpt from […]
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day Read More »
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities 2026-10-14 at 09:12 By Ionut Arghire The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities Read More »
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN 2026-10-13 at 21:43 By Eduard Kovacs CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges. The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek. This article is […]
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN Read More »
Adobe Patches 140 Vulnerabilities Across 10 Products 2026-10-13 at 20:14 By Eduard Kovacs The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge. The post Adobe Patches 140 Vulnerabilities Across 10 Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Adobe Patches 140 Vulnerabilities Across 10 Products Read More »