120 stories on file from this desk.
No Image
Cybersecurity
1,017 words 5 min read
Siemens disclosed Monday that attackers exploited a DLL sideloading flaw in Siemens Software Center as part of a malware campaign, and the company had patched the issue two days after its October 15 advisory. The vulnerability, tracked as…
No Image
Cybersecurity
1,071 words 5 min read
Researchers at watchTowr Labs published a technical breakdown this month of two flaws in Barracuda's Email Security Gateway (ESG) appliance that can be chained by an unauthenticated attacker to gain root-level access. The flaws are tracked…
No Image
Cybersecurity
1,145 words 6 min read
On October 21, 2026, PHP released fixes for two critical vulnerabilities that let an unauthenticated attacker run arbitrary code on a server. CVE-2026-109618 and CVE-2026-109619, collectively tracked as PHP2Shell, carry a CVSS v4.0 score…
No Image
Cybersecurity
1,081 words 5 min read
Governments, councils and major websites pulled pages offline last week after two critical vulnerabilities surfaced in PHP, the programming language that powers roughly 70% of the web. The bugs were found by AI tools, had gone undetected…
No Image
Cybersecurity
1,038 words 5 min read
Two critical flaws in the PHP runtime, tracked as CVE-2026-109618 and CVE-2026-109619, allow unauthenticated remote code execution on any server running affected versions. The PHP project assigned each a CVSS base score of 9.2 out of 10…
No Image
Cybersecurity
1,041 words 5 min read
A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, carries a CVSS score of 9.8 out of 10 and affects Ubuntu, Red Hat Enterprise Linux, and other distributions. The kernel's own CVE team assigned the score. Anthropic said on…
No Image
Cybersecurity
1,566 words 8 min read
The cybersecurity landscape continues to evolve at an unprecedented pace, driven by increasingly sophisticated ransomware groups and state-linked threat actors. In October 2026, the U.S. Cybersecurity and Infrastructure Security Agency…
No Image
Cybersecurity
1,016 words 5 min read
Palo Alto Networks Unit 42 disclosed two critical remote code execution flaws in the PHP core interpreter on October 29, 2026. The bugs, tracked as CVE-2026-109618 and CVE-2026-109619 and grouped under the name PHP2Shell, each carry a CVSS…
No Image
Cybersecurity
1,226 words 6 min read
In the rapidly evolving digital landscape of October 2026, organizations worldwide face an urgent cybersecurity challenge. The United States Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert concerning two…
No Image
Cybersecurity
1,012 words 5 min read
Government websites in Europe went dark after a pair of critical remote code execution flaws in PHP hit the wire on October 21, 2026. The bugs, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively called "php2shell," let an…
No Image
Cybersecurity
1,219 words 6 min read
In a stark reminder of the persistent vulnerabilities lurking in network infrastructure, researchers have uncovered a sophisticated zero-day exploit chain affecting Ivanti Connect Secure (ICS) VPN appliances. The discovery, first reported…
No Image
Cybersecurity
1,056 words 5 min read
Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, allow unauthenticated remote code execution on any PHP installation serving web requests. The pair, nicknamed PHP2Shell, carry a CVSS 4.0 score of 9.2 and…