/
countries_code:GB × criticity:critical × limpar

Resultados

5 casos · pág. 1/1

haveibeenpwned.com · critical

FulcrumSec leaks data of 8.8M Manchester Airports Group customers after August 2026 breach

In August 2026, Manchester Airports Group (MAG) disclosed a data breach affecting its services. The FulcrumSec hacking group later claimed the incident and published data relating to 8.8M customers of Manchester, Stansted and East Midlands airports. The leaked data includes email addresses and phone numbers, along with airport service rec…

thehackernews.com · · 4 fontes · 4 atualizações critical

Attackers abuse UpdraftCentral keys stolen in TeamUpdraft breach to backdoor WordPress sites via malicious plugins

Unknown threat actors breached the TeamUpdraft website on 17-18 October 2026 and likely accessed its customer database, which holds connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. Patchstack observed an attacker holding valid UpdraftCentral dashboard keys issuing signed commands to install backdoor plugins on connected …

theregister.com · critical

Danfoss and Copeland refrigeration controllers hacked across ~700 French supermarkets despite earlier vulnerability warnings

Unknown attackers compromised thousands of internet-exposed refrigeration controllers late on Sunday, raising temperatures to as high as 122°F (50°C), spoiling food and causing fires at nearly 700 French supermarkets. France's ANSSI warned of widespread compromises of Danfoss controllers and a day later added Copeland and its Dixell brand…

hipaajournal.com · · 5 fontes · 5 atualizações critical

CISA and partners warn SafePay ransomware has hit 600+ organizations since Aug 2024, via edge-device exploits and backup destruction

A joint StopRansomware advisory (AA26-293A) from CISA, the FBI, the USSS, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the North West Regional Organised Crime Unit details SafePay ransomware activity observed through August 2026 (cisa.gov). The group has been active since August 2024 and has compromised …

wired.com · · 16 fontes · 18 atualizações critical

PHP2Shell: PHP patches critical RCE flaws CVE-2026-109618 and CVE-2026-109619 after embargo leak; early attacks seen

The PHP security team released emergency fixes on October 21, 2026 (around 14:00 UTC) for two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed php2shell (bleepingcomputer.com, wired.com). Both are rated CVSS v4.0 9.2. Details leaked on October 20 through a deleted Hacker News post, which…