/
researchers:SOCRadar × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · · 2 fontes · 2 atualizações exploit público critical

INC and The Gentlemen ransomware affiliates' exposed AI-driven 'Phantom' intrusion framework tied to 62 victim organizations

SOCRadar researchers found an exposed open directory on 45.227.254.43 (late September 2026, per gbhackers.com) that revealed an AI-assisted intrusion ecosystem run by affiliates of the INC Ransom and The Gentlemen ransomware groups. It is built around an "Autonomous Red Team Kill Chain Framework" called Phantom. Operators used OpenCode wi…

CVE-2026-35616 CVE-2024-57727 CVE-2026-41940 INC Ransom The Gentlemen managed service providers finance
theregister.com · · 31 fontes · 49 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline; separate unpatched CVE-2026-115560 disclosed

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 CVE-2026-115560 government transportation