countries_code:FR × victim_sectors:transportation × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · há 1h · 25 fontes · 32 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619; exploitation attempts seen from Oct 17, broad exploitation after patches

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation

bitdefender.com · há 2d · 2 fontes · 2 atualizações high

FBI urges ShinyHunters members to surrender after Dutch arrest of alleged leader; group escalates with FBI portal breach and Cl0p extortion

The FBI has publicly called on remaining ShinyHunters members to surrender. Cyber division assistant director Brett Leatherman released a video thanking Dutch police for arresting a 24-year-old in Amsterdam. The FBI calls him "one of the alleged leaders" of the group, while Dutch police say only that he played a role. He is also suspected…

CVE-2026-35273 ShinyHunters Rey aerospace government