/
latest_source_host:recordedfuture.com × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

recordedfuture.com · · 25 fontes · 28 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619 as exploitation attempts begin

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation
recordedfuture.com · medium

Russia escalates VPN blocking, regional internet shutdowns and surveillance, raising operational risk for firms in Russia

Since mid-2025 the Kremlin has sharply escalated restrictions on digital communications, according to Insikt Group (Recorded Future). Measures include VPN blocking, state-managed regional internet shutdowns, throttling of Telegram and WhatsApp, promotion of the state-owned Max messenger, and expanded surveillance of Russian and foreign en…

telecommunications government