vendors:OVHcloud × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

darkreading.com · há 1d · 5 fontes · 5 atualizações high

OVHcloud CLI v0.11.0–v0.15.0 release assets swapped with secret-stealing binary via hijacked GitHub contributor account

On 19 October 2026 an attacker used a hijacked GitHub account of an OVHcloud contributor to overwrite the download archives of five existing OVHcloud CLI releases (v0.11.0 to v0.15.0) with a build designed to steal secrets from the disk of any machine that ran it (thehackernews.com, bleepingcomputer.com). The files were live for about 94 …

GlassWorm technology cloud services

thehackernews.com · há 1h · 28 fontes · 43 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation