Resultados

2 casos · pág. 1/1

unit42.paloaltonetworks.com · há 1d exploit público high

CL-UNK-1211 uses AI-generated payloads and SysGoRAT RAT to spy on government Linux servers

Unit 42 reports a campaign, tracked as CL-UNK-1211, that targeted government entities and state-affiliated infrastructure between October 2025 and April 2026. The cluster has not been attributed to a nation-state or to cybercrime. The attackers focused on Linux servers for reconnaissance, persistence and intelligence collection, including…

CVE-2025-55182 CVE-2021-4034 CL-UNK-1211 government

security.paloaltonetworks.com · há 3h · 21 fontes · 22 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619 as exploitation attempts begin

The PHP security team released emergency fixes on October 21, 2026 at 14:00 UTC for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials a…

CVE-2026-109618 CVE-2026-109619 government transportation