/
countries_code:US × victim_sectors:education × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

greynoise.io · critical

AI-orchestrated campaign exploits PaperCut NG/MF flaws, compromising 440+ instances across 48 countries

GreyNoise reports that on 31 August 2026 a likely Russian-speaking malicious cyber actor used 45.142.193.132 and AI to develop, test and deploy exploits for PaperCut NG/MF (CVE-2026-81578 and CVE-2026-82078). Using hundreds of AI agents built on OpenAI's Codex harness, a DeepSeek model and public offensive security tools, the actor compro…

CVE-2026-81578 CVE-2026-82078 CVE-2021-42278 education government
tenable.com · · 27 fontes · 39 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619; broad exploitation attempts, ASLR-bypass exploit reported, UK government services offline, criminal forums go offline, wide vendor and government

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation