/
countries_code:GB × victim_sectors:education × limpar

Resultados

6 casos · pág. 1/1

theregister.com · low

UK school reader anecdote: weak six-character passwords and shared 'letmein' credential persisted after ransomware attack

A Register "On Call" column recounts a reader's account (pseudonym Daniel) of joining a UK school in 2020, after the school's network had been taken offline for three months by ransomware. Recovery relied on external contractors and a months-old backup. His audit found a password policy of six letters with no complexity or expiry, and use…

theregister.com · low

Zscaler partner content: UK public sector cyber resilience becomes a board-level priority amid DSIT scrapping and policy change

This sponsored piece from Zscaler argues that UK public services have reached a cyber resilience inflection point. It cites a new Prime Minister, the scrapping of DSIT, and the redistribution of its cyber and digital functions across Whitehall. Three forces are named: policy raising expectations for boards, organizational reform (Local Go…

hacktron.ai · · 26 fontes · 33 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619; exploitation attempts seen from Oct 17, broad exploitation after patches

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…