ARCHIVE
Tag: crypto
-
Threat digest: 2026-10-23
PHP2Shell exploitation was traced back four days before its patches shipped, attackers exploited a third VeloCloud Orchestrator zero-day, and an Indian certificate authority began exiting the TLS business…
-
Threat digest: 2026-10-21
Two critical PHP remote code execution flaws leaked ahead of today's emergency release, CISA and partners count about 600 SafePay ransomware victims, and eight compromised eMudhra CA keys…
-
Threat digest: 2026-10-20
A backdoored Rank Math PRO release leaves WordPress sites needing a full clean-up, an unpatched Broadcom Wi-Fi flaw puts routers at risk from radio range, and F5 ships…
-
Threat digest: 2026-10-19
A quiet Sunday was led by three exploited flaws: a public Plex Media Server exploit chain, an actively attacked Japanese WAF, and a breach at AI coding tool…
-
Threat digest: 2026-10-17
Two actively exploited flaws entered CISA's known exploited list on the same day, a BeyondTrust authentication bypass used by a China-linked group and a Fortinet path traversal tied…
-
Threat digest: 2026-10-15
Three exploited vulnerabilities added to CISA's catalog, including zero-days in Palo Alto firewalls and Cisco email gateways plus unpatched Ahsay backup flaws, headline a day that also brought…
-
Threat digest: 2026-10-14
Microsoft's largest ever Patch Tuesday (1,411 flaws and three zero-days, one already exploited) and an Ivanti Connect Secure zero-day chain against a fully patched VPN appliance top a…
-
Threat digest: 2026-10-13
Maximum-severity flaws in GitLab, the Bricksforge WordPress plugin and SonicWall SMA1000 appliances drove both urgent patching and exploitation activity, a confirmed hardware implant in Ledger wallets sold through…
-
Threat digest: 2026-10-12
AI-enabled attacks and supply chains led the day: ransomware crews exploited a Palo Alto GlobalProtect authentication bypass, a suspected North Korean crew backdoored a fake Terraform provider, lab…