/
countries:Australia × criticity:critical × limpar

Resultados

6 casos · pág. 1/1

cisa.gov · · 2 fontes · 2 atualizações critical

CISA urges Citrix NetScaler ADC/Gateway patching and compromise checks as zero-days, including new CVE-2026-107406, are exploited

CISA issued an alert on exploitation of critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway, noting confirmed malicious activity involving at least some of them. The alert references Citrix bulletins for CVE-2026-107406, CVE-2026-88779 and CVE-2026-88771 through CVE-2026-88778. Because NetScaler updates can be …

CVE-2026-88771 CVE-2026-88772 CVE-2026-88779 government education
industrialcyber.co · critical

CISA, FBI and partners warn SafePay ransomware has compromised about 600 critical infrastructure organizations worldwide

CISA, the FBI, the U.S. Secret Service and international partners issued a joint advisory on SafePay ransomware. The group has been highly active since August 2024 and has compromised roughly 600 organizations across multiple critical infrastructure sectors in the Americas, Europe and Australia. The FBI describes it as one of 2026's most …

SafePay critical infrastructure
hipaajournal.com · · 5 fontes · 5 atualizações critical

CISA and partners warn SafePay ransomware has hit 600+ organizations since Aug 2024, via edge-device exploits and backup destruction

A joint StopRansomware advisory (AA26-293A) from CISA, the FBI, the USSS, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the North West Regional Organised Crime Unit details SafePay ransomware activity observed through August 2026 (cisa.gov). The group has been active since August 2024 and has compromised …

CVE-2020-3259 CVE-2023-20269 CVE-2023-27532 SafePay critical infrastructure government
f5.com · exploit público critical

React2Shell (CVE-2025-55182) mass exploitation: RondoDox, credential stealers and reverse shells observed in December 2025

F5 Labs, using Efflux sensor telemetry, analyzed December 2025 exploitation of React2Shell (CVE-2025-55182), a CVSS 10.0 unsafe deserialization RCE in React Server Components. It was disclosed on 3 December 2025 and rose to second place among the most exploited CVEs, behind only CVE-2017-9841. Within days of disclosure, actors moved from …

CVE-2025-55182 CVE-2017-9841 CVE-2023-1389 RondoDox
tenable.com · · 27 fontes · 39 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619; broad exploitation attempts, ASLR-bypass exploit reported, UK government services offline, criminal forums go offline, wide vendor and government

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation
infosecurity-magazine.com · · 10 fontes · 12 atualizações critical

ConnectWise Cloud Backup (SkyKick) app credentials abused in Microsoft 365 supply-chain attack; ~1,000 tenants probed, services suspended

ConnectWise suspended Cloud Backup (formerly SkyKick), SaaS Security and Cloud Management after unknown actors gained unauthorized access to its application identities and used them to sign in to customers' Microsoft 365 tenants. ConnectWise says it identified the incident on October 14, 2026 (thehackernews.com) and began mitigations on O…

UNC7017 managed service providers policy