3 casos · pág. 1/1
Insikt Group (Recorded Future) observed a 48% rise in reported cyberattacks on Japanese organizations between Q2 and Q3 2026, from 621 to 918 incidents. Masaaki Taira, head of Japan's NCSH, declared a "state of emergency in cyberspace". Victims span retail, rail, logistics, media, education and software. Incidents involved ransomware, sto…
The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…
Microsoft attributes the supply-chain compromise of ConnectWise Cloud Backup (formerly SkyKick) to Storm-0940, a China state-aligned actor active since at least 2021. The group has used the agentic AI penetration-testing framework ARTEX since at least September 2026 against hundreds of organizations worldwide (cyberscoop.com, thehackernew…
