> TODAY'S SUMMARY (1 articles)
Today’s cybersecurity news highlights critical vulnerabilities in PHP, known as PHP2Shell, which underscore issues in coordinated vulnerability disclosure. These vulnerabilities pose significant risks to enterprises relying on PHP for web applications, potentially exposing sensitive data and systems. Organizations are urged to assess their PHP implementations and apply necessary patches swiftly. Additionally, the ongoing trend of increasing sophistication in cyberattacks emphasizes the need for robust security measures and proactive incident response strategies. As attackers adapt, businesses must prioritize vulnerability management and employee training to mitigate risks effectively.
|
// AI-powered summary generated at 04:00
La société de gestion des avantages sociaux Paylogix a été victime d'une cyberattaque. Des pirates informatiques ont volé des informations sensibles, y compris des numéros de sécurité sociale, des données financières, des informations de santé et des numéros de passeport, appartenant à des dizaines...
In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody for flight logs and video, how to publish drone activity...
333 relais de sortie Tor compromis redirigeaient les connexions SSH vers des serveurs pirates pour voler les mots de passe et installer le malware Ebury.
Le post Réseau Tor : 333 relais de sortie compromis interceptaient les connexions SSH pour diffuser Ebury a été publié sur IT-Connect.
Plus de 11,7 millions de comptes CAPCOM ID exposés et 196 mots de passe modifiés par un attaquant : Capcom confirme une fuite de données massive.
Le post Capcom piraté : 11,7 millions de comptes exposés et des mots de passe changés par l’attaquant a été publié sur IT-Connect.
Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report. 56% have experienced professional workforce reductions linked to AI, evenly divided between entry-level...
Amazon a repéré une tentative d'exploitation de PHP2Shell le 17 octobre 2026, soit quatre jours avant la sortie des correctifs pour ces failles critiques.
Le post PHP2Shell : les attaquants avaient quatre jours d’avance sur le correctif a été publié sur IT-Connect.
Un compte d'accès du LOOF a permis d'extraire 2,9 millions d'enregistrements du fichier I-CAD : noms des détenteurs de chats et identification des animaux.
Le post Fuites I-CAD : 2,9 millions de fiches de chats volées, avec le nom de leurs propriétaires a été publié sur IT-Connect.
Here’s a look at the most interesting products from the past week, featuring releases from AppGate, IDENTOS, Sweet Security, and ThreatModeler. Sweet Security adds one-click protection for vulnerable cloud workloads Sweet Security has announced the release of Virtual Patching, a new capability that...
Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time to truly understand. But one of the lesser-known stories centers around disclosure.
According to The PHP Foundation, sev...
On October 21st, 2026, the PHP project released emergency updates for two critical vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. We warned site owners before the fixes became available and followed up after our team reviewed the vulnerability details and began testing the patched a...
Canada’s Parliament is debating a massive expansion of surveillance powers that will threaten the privacy and security of millions of people. Bill C-22, also called the Lawful Access Act, has already passed the House of Commons, and is now before the Canadian Senate.Â
Canadians still have an opportu...
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]
Late Wednesday night the Toronto chapter of Crime Stoppers broke ranks with the national association, revealing a timeline showing what it knew and when along with an announcement that it will pause operations.
China-linked Storm-0940 used AI tool ARTEX to target 2,250 Microsoft 365 tenants, exploiting stolen ConnectWise credentials at machine speed. Microsoft published a detailed technical report naming Storm-0940, a China state-aligned group, as the actor behind the ConnectWise Cloud Backup supply chain...
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) pose a risk to home users and their data. We explain the danger and how to stay protected.
“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, including some that allow various unauthenticated actions.Â
The most serious of the security issues, labeled critical in s...
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. [...]
Ali Firas discovered that zlib incorrectly handled certain non-blocking
write operations. An attacker could possibly use this issue to trigger a
heap buffer overflow, resulting in a denial of service or arbitrary code
execution.
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]