vulnerability

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

Brotli, exploited, Featured, Malware & Threats, Node2Shell, Vulnerabilities, vulnerability /

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts 2026-10-28 at 10:37 By Eduard Kovacs CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek. This […]

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts Read More »

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

Aikido Security, CVE, cybersecurity, Google, Hot stuff, Imperva, News, Node.js, patch, Rapid7, Tenable, vulnerability /

Brotli bug reaches far beyond Node.js (CVE-2026-111497) 2026-10-27 at 19:38 By Zeljka Zorz A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as “Node2Shell”, “Broccoli2Shell” and “Brotli2Shell”, CVE-2026-111497 is a remotely exploitable out-of-bounds write flaw that gained widespread attention after Node.js […]

Brotli bug reaches far beyond Node.js (CVE-2026-111497) Read More »

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

controversy, Featured, SSH, Tailscale, Tailworm, Vulnerabilities, vulnerability /

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws 2026-10-27 at 17:26 By Eduard Kovacs Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released. The post Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws appeared first on SecurityWeek. This article is […]

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws Read More »

HPE Patches Dozens of Critical Flaws in Networking Products

Aruba, HPE, patches, Vulnerabilities, vulnerability /

HPE Patches Dozens of Critical Flaws in Networking Products 2026-10-27 at 15:13 By Ionut Arghire Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches Dozens of Critical Flaws in Networking Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

HPE Patches Dozens of Critical Flaws in Networking Products Read More »

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

apple, Featured, iOS, macOS, Mobile & Wireless, patches, Vulnerabilities, vulnerability /

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 2026-10-27 at 13:49 By Eduard Kovacs Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones. The post iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to […]

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 Read More »

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Blue Initiative, Featured, ICS, ICS/OT, OT, port, ship, Vulnerabilities, vulnerability, vulnerability index /

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems 2026-10-27 at 09:14 By Eduard Kovacs Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products. The post Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems appeared first on SecurityWeek. This […]

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems Read More »

PHP2Shell Exploitation Moves From Probes to Working Shells 

exploited, Featured, PHP, PHP2Shell, Vulnerabilities, vulnerability /

PHP2Shell Exploitation Moves From Probes to Working Shells  2026-10-26 at 15:30 By Eduard Kovacs Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24. The post PHP2Shell Exploitation Moves From Probes to Working Shells  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

PHP2Shell Exploitation Moves From Probes to Working Shells  Read More »

Fortinet patches critical FortiOS flaws found with AI help

AI, Don't miss, email security, firewall, Fortinet, Hot stuff, log management, News, security testing, security update, vulnerability, vulnerability disclosure /

Fortinet patches critical FortiOS flaws found with AI help 2026-10-26 at 13:22 By Zeljka Zorz Fortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about the fixed vulnerabilities under wraps until November 10, 2026. The vulnerabilities were uncovered with the help of AI models […]

Fortinet patches critical FortiOS flaws found with AI help Read More »

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Broccoli2Shell, Brotli, Featured, HTTP2Shell, Node2Shell, Vulnerabilities, vulnerability /

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages 2026-10-26 at 12:21 By Eduard Kovacs An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution. The post Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages appeared first on SecurityWeek. This article is […]

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages Read More »

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

exploited, Mirai, PHP, PHP2Shell, Vulnerabilities, vulnerability /

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge 2026-10-23 at 15:45 By Eduard Kovacs Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek. […]

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge Read More »

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months

Arista, exploited, Vulnerabilities, vulnerability, Zero-Day /

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months 2026-10-23 at 12:58 By Ionut Arghire The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges. The post Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months Read More »

Atlassian Patches 75 Flaws in Data Center and Server Products

Atlassian, patch, Vulnerabilities, vulnerability /

Atlassian Patches 75 Flaws in Data Center and Server Products 2026-10-23 at 10:54 By Eduard Kovacs Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components. The post Atlassian Patches 75 Flaws in Data Center and Server Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Atlassian Patches 75 Flaws in Data Center and Server Products Read More »

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Mobile & Wireless, Signal, Vulnerabilities, vulnerability /

Signal Vulnerability Lets Malicious Callers Block Hang-Ups 2026-10-22 at 17:55 By Ionut Arghire Affecting the open source calling library RingRTC, the bug prevented calls from ending properly. The post Signal Vulnerability Lets Malicious Callers Block Hang-Ups appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Signal Vulnerability Lets Malicious Callers Block Hang-Ups Read More »

Splunk, SolarWinds Release Fresh Security Updates

patches, SolarWinds, Splunk, Vulnerabilities, vulnerability /

Splunk, SolarWinds Release Fresh Security Updates 2026-10-22 at 13:45 By Ionut Arghire Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information. The post Splunk, SolarWinds Release Fresh Security Updates appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Splunk, SolarWinds Release Fresh Security Updates Read More »

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

Cisco, cybersecurity, Don't miss, Fortinet, Hot stuff, News, Palo Alto Networks, patch, PHP, security update, VulnCheck, vulnerability, vulnerability management /

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers 2026-10-22 at 13:22 By Mirko Zorz Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell, a pair of critical PHP vulnerabilities that let an attacker run code on a web server without logging in. Palo Alto has […]

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers Read More »

Cisco Patches 34 Vulnerabilities Across Multiple Products

Cisco, patch, Vulnerabilities, vulnerability /

Cisco Patches 34 Vulnerabilities Across Multiple Products 2026-10-22 at 13:05 By Ionut Arghire Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks. The post Cisco Patches 34 Vulnerabilities Across Multiple Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches 34 Vulnerabilities Across Multiple Products Read More »

Signal flaw could expose audio and video even after users hang up

mobile apps, News, Signal, vulnerability /

Signal flaw could expose audio and video even after users hang up 2026-10-22 at 11:39 By Sinisa Markovic A flaw in Signal’s calling library could let the other person on a call keep receiving a user’s audio, and possibly video, after that user hangs up. Tracked as CVE-2026-113380, the vulnerability affects RingRTC versions before 2.72.0. […]

Signal flaw could expose audio and video even after users hang up Read More »

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Featured, Oracle, Oracle CPU, patches, Vulnerabilities, vulnerability /

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU 2026-10-22 at 10:38 By Eduard Kovacs Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU Read More »

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

exploited, Featured, PHP, PHP2Shell, Vulnerabilities, vulnerability /

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors 2026-10-21 at 19:50 By Ionut Arghire Several cybersecurity companies saw exploitation attempts before PHP released the patches. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors Read More »

PHP2Shell: Critical PHP vulnerabilities patched, update now!

Cloudflare, CVE, CVSS, cybersecurity, Don't miss, Hot stuff, News, patch, PHP, security update, UK NCSC, vulnerability /

PHP2Shell: Critical PHP vulnerabilities patched, update now! 2026-10-21 at 16:51 By Mirko Zorz The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and […]

PHP2Shell: Critical PHP vulnerabilities patched, update now! Read More »

Scroll to Top