Security Intelligence
Another PHP issue identified while vendors report affected products
PHP2Shell exploitation attempts are rising, and a new PHP flaw (CVE-2026-115560) adds confusion. Learn who’s affected,...
Security Intelligence
Active exploitation of Plex2Shell vulnerabilities
CISA added the Plex2Shell exploit chain to its KEV catalog. Learn how attackers exploit Plex Media Server, who’s at...
Security Intelligence
PHP releases emergency updates for critical remote code execution flaws
PHP released emergency updates for CVE-2026-109618 and CVE-2026-109619, vulnerabilities that can allow unauthenticated...
Security Intelligence
AOMEI Backupper supply chain attack
A supply chain campaign targeting AOMEI Technology's update infrastructure has been attributed to threat actor UNC7017,...
Security Intelligence
Compromised ConnectWise Cloud Backup identities used to access Microsoft 365 tenants
ConnectWise disclosed unauthorized access involving application identities associated with ConnectWise Cloud Backup on...
Security Intelligence
Threat actors exploit AhsayCBS zero-days
Attackers are exploiting two AhsayCBS zero-days to gain unauthenticated SYSTEM access. Learn how the flaws chain...
Security Intelligence
Cisco fixes critical NX-OS remote code execution vulnerability
Cisco security updates address a critical vulnerability in the NX-API management interface used by some Cisco Nexus...
Security Intelligence
SonicWall fixes maximum severity SMA1000 vulnerability
SonicWall released hotfixes on October 6, 2026, for four vulnerabilities affecting SMA1000 secure remote access...
Security Intelligence
Exploitation begins after public PoC release for Atlassian flaw
Active exploitation of CVE-2026-21589 began shortly after public proof-of-concept code became available, reducing the...
Security Intelligence
Dell patches max-severity vulnerabilities in Container Storage Modules
Dell released CSM 1.18.0 to address six critical vulnerabilities affecting how Kubernetes environments connect to and...
Security Intelligence
Citrix patches another exploited NetScaler vulnerability
Citrix disclosed CVE-2026-88779 after observing active exploitation against NetScaler deployments. Affected...
Security Intelligence
Patches pending for actively exploited FortiMail flaw
Fortinet disclosed active exploitation of CVE-2026-104286. At disclosure, patches were not available for affected...