/
countries_code:RO × victim_sectors:education × limpar

Resultados

2 casos · pág. 1/1

grahamcluley.com · medium

Smashing Security #489: Ledger wallet supply-chain backdoors, Candiru zero-click spyware via ads, and other incidents

Episode 489 of the Smashing Security podcast covers several recent incidents, linked mainly through show-note references. The headline topic is a supply-chain attack on Ledger hardware crypto wallets, with reports of backdoored devices and funds being drained. Ledger reportedly asked sellers across Asia to halt sales and published guidanc…

cryptocurrency media
tenable.com · · 28 fontes · 42 atualizações critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; broad exploitation attempts, European sites offline

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation