/
countries_code:CN × victim_sectors:"critical infrastructure" × limpar

Resultados

2 casos · pág. 1/1

cyberscoop.com · low

Bipartisan House bill would task NIST with guidance against AI model distillation attacks by Russia, China, Iran and North Korea

A new bipartisan House bill, the AI Cyber Defense Act, would direct NIST to develop voluntary industry standards and best practices for defending AI models against distillation attacks by foreign entities. The bill is sponsored by Reps. Pat Harrigan (R-N.C.) and George Whitesides (D-Calif.) and was shared exclusively with CyberScoop ahead…

f5.com · · 31 fontes · 48 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline; separate unpatched CVE-2026-115560 disclosed

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…