/
latest_source_host:tenable.com × victim_sectors:transportation × limpar

Resultados

2 casos · pág. 1/1

tenable.com · high

Iran-linked APTs disrupt US critical infrastructure OT via exposed PLCs as AI accelerates attacks; CISA issues guidance

Tenable's Cybersecurity Awareness Month blog summarizes government guidance on defending critical infrastructure against nation-state and AI-assisted attacks. Per a joint US government advisory (published in April, updated in July), Iran-affiliated APT groups have attacked US water, energy and government facilities since Operation Epic Fu…

CyberAv3ngers critical infrastructure water
tenable.com · · 27 fontes · 39 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619; broad exploitation attempts, ASLR-bypass exploit reported, UK government services offline, criminal forums go offline, wide vendor and government

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation