countries_code:ES × victim_sectors:telecommunications × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

infosecurity-magazine.com · há 2d · 10 fontes · 12 atualizações critical

ConnectWise Cloud Backup (SkyKick) app credentials abused in Microsoft 365 supply-chain attack; ~1,000 tenants probed, services suspended

ConnectWise suspended Cloud Backup (formerly SkyKick), SaaS Security and Cloud Management after unknown actors gained unauthorized access to its application identities and used them to sign in to customers' Microsoft 365 tenants. ConnectWise says it identified the incident on October 14, 2026 (thehackernews.com) and began mitigations on O…

UNC7017 managed service providers policy

tenable.com · há 4h · 28 fontes · 42 atualizações critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; broad exploitation attempts, European sites offline

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation