/
vendors:A* × latest_source_host:itsecurityguru.org × limpar

Resultados

4 casos · pág. 1/1

itsecurityguru.org · · 3 fontes · 3 atualizações critical

PHP2Shell: two critical PHP engine flaws exploited from Oct 17, leaked before disclosure; emergency patches released Oct 21

Two critical vulnerabilities in the PHP engine, collectively dubbed PHP2Shell, were fixed in emergency security releases on October 21, 2026 after details leaked ahead of the planned disclosure (darkreading.com, itsecurityguru.org). Amazon Web Services (AWS) honeypot logs show at least one actor attempting exploitation from October 17, fo…

itsecurityguru.org · high

LiteLLM flaws CVE-2026-35029 and CVE-2026-59823 let low-privileged users take over AI gateways and steal provider API keys

Check Point Research disclosed two high-risk vulnerabilities in LiteLLM, the open-source AI gateway that sits between enterprise applications and providers such as OpenAI, Anthropic and Google. A user with minimal privileges could take full control of the gateway, read sensitive files, execute arbitrary code and harvest the provider API k…

itsecurityguru.org · low

Opinion: Virgin Active IT head on leading teams through unplanned digital change projects, ahead of DTX + UCX London 2026 panel

This is an opinion and event-promotion piece by Louise John, Head of IT Service Delivery at Virgin Active. It offers IT managers advice on handling unexpected projects with tight deadlines, such as a software rollout due in six weeks. The recommendations are to define the essential deliverables, manage expectations with senior leadership,…