/
countries_code:NO × victim_sectors:government × limpar

Resultados

3 casos · pág. 1/1

schneier.com · low

Reader comment on Schneier blog cites 60 Minutes report that US obtained a Russian directed-energy weapon linked to Havana Syndrome

A reader comment (ResearcherZero) on Schneier on Security's squid-blogging post discusses Havana Syndrome (anomalous health incidents, AHI). It cites a 60 Minutes/CBS report that the U.S. government acquired a directed-energy weapon from a Russian criminal network and has tested it, reportedly on animals. The commenter claims that inciden…

Unit 29155 GRU government
wired.com · · 5 fontes · 5 atualizações high

AdFection: Discover-Tech ads delivered Candiru zero-click spyware to at least 45 Al Jazeera devices, Citizen Lab reports

The Citizen Lab disclosed AdFection on 15 October 2026. It calls this the first public technical confirmation of zero-click mercenary spyware delivered to real devices through targeted online advertising. The Israeli ad firm Discover-Tech (spelled Discovere-Tech by bleepingcomputer.com) posed as a legitimate ad company while acting as a b…

Candiru Discovere-Tech media government
securityweek.com · · 28 fontes · 46 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline; separate unpatched CVE-2026-115560 disclosed

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 CVE-2026-115560 government transportation