/
countries_code:DE × criticity:critical × victim_sectors:government × limpar

Resultados

2 casos · pág. 1/1

industrialcyber.co · · 7 fontes · 7 atualizações critical

CISA and partners warn SafePay ransomware has hit 600+ organizations since Aug 2024, via edge-device exploits and backup destruction

A joint StopRansomware advisory (AA26-293A) from CISA, the FBI, the USSS, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the North West Regional Organised Crime Unit details SafePay ransomware activity observed through August 2026 (cisa.gov). Findings cover FBI, USSS and German investigations (securityaffa…

f5.com · · 31 fontes · 48 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline; separate unpatched CVE-2026-115560 disclosed

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…