/
attack_type:zero_day_exploitation × latest_source_host:krebsonsecurity.com × limpar

Resultados

4 casos · pág. 1/1

krebsonsecurity.com · · 2 fontes · 2 atualizações high

Microsoft October 2026 Patch Tuesday fixes 1,400+ flaws, a record batch with one exploited Windows Shell zero-day

Microsoft released updates fixing more than 1,400 vulnerabilities in Windows and other software, far above September's record of nearly 1,000 fixes. Only one flaw is a confirmed zero-day exploited in the wild: CVE-2026-96951, a security feature bypass in Windows Shell affecting Windows 10, Windows 11 and some Windows Server versions. At l…

krebsonsecurity.com · critical

Critical PHP zero-days CVE-2026-109618 and CVE-2026-109619 enable RCE and are exploited in the wild, affecting PHP 5.4 and later

PHP released an emergency update for two critical zero-day vulnerabilities, CVE-2026-109618 and CVE-2026-109619. They allow remote code execution, denial of service and data exposure, and are reportedly already being exploited in the wild. Nearly 70 percent of websites are said to need updating, and Reuters reports that government website…

krebsonsecurity.com · critical

Microsoft September 2026 Patch Tuesday fixes record 974 flaws, including two actively exploited Windows zero-days

Microsoft released updates for at least 974 vulnerabilities in Windows and other software, its largest Patch Tuesday ever. The previous record was 570 fixes in July. The 2026 total now exceeds 2,600, more than double the 2020 record year (1,245), with three months still to go. Microsoft and other large vendors, including Adobe, Cisco, Goo…

krebsonsecurity.com · critical

ShinyHunters Suspect Arrested in Netherlands as Group Mass-Exploits Oracle PeopleSoft CVE-2026-35273 and Breaches FBI Jobs Site

Dutch authorities arrested a 24-year-old, reportedly Pepijn van der Stap (alias "Umbreon"), around Sept. 16, 2026 on suspicion of aiding data thefts and extortions by ShinyHunters. Van der Stap was previously convicted in 2023 for data theft and extortion. Days after the arrest, remaining ShinyHunters members escalated, breaching the FBI …