/
countries_code:SE × victim_sectors:"critical infrastructure" × limpar

Resultados

2 casos · pág. 1/1

wired.com · · 5 fontes · 5 atualizações high

AdFection: Discover-Tech ads delivered Candiru zero-click spyware to at least 45 Al Jazeera devices, Citizen Lab reports

The Citizen Lab disclosed AdFection on 15 October 2026. It calls this the first public technical confirmation of zero-click mercenary spyware delivered to real devices through targeted online advertising. The Israeli ad firm Discover-Tech (spelled Discovere-Tech by bleepingcomputer.com) posed as a legitimate ad company while acting as a b…

Candiru Discovere-Tech media government
gbhackers.com · · 28 fontes · 44 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation