ARCHIVE
Tag: supply-chain
-
Threat digest: 2026-10-22
PHP shipped emergency fixes for two critical PHP2Shell RCE flaws as exploitation attempts began, GitLab patched a CVSS 10.0 unauthenticated RCE, and a compromised LiteLLM release pushed a…
-
Threat digest: 2026-10-21
Two critical PHP remote code execution flaws leaked ahead of today's emergency release, CISA and partners count about 600 SafePay ransomware victims, and eight compromised eMudhra CA keys…
-
Threat digest: 2026-10-20
A backdoored Rank Math PRO release leaves WordPress sites needing a full clean-up, an unpatched Broadcom Wi-Fi flaw puts routers at risk from radio range, and F5 ships…
-
Threat digest: 2026-10-18
A stolen ConnectWise backup credential opened Microsoft 365 tenants across its managed service provider customer base, while California confirmed that millions of student records were copied from a…
-
Threat digest: 2026-10-17
Two actively exploited flaws entered CISA's known exploited list on the same day, a BeyondTrust authentication bypass used by a China-linked group and a Fortinet path traversal tied…
-
Threat digest: 2026-10-16
Freshly confirmed exploitation of Atlassian Data Center and Ivanti Connect Secure flaws leads the day, alongside Microsoft's record patch release, a Linux kernel bug that breaks cloud sandbox…
-
Threat digest: 2026-10-15
Three exploited vulnerabilities added to CISA's catalog, including zero-days in Palo Alto firewalls and Cisco email gateways plus unpatched Ahsay backup flaws, headline a day that also brought…
-
Threat digest: 2026-10-14
Microsoft's largest ever Patch Tuesday (1,411 flaws and three zero-days, one already exploited) and an Ivanti Connect Secure zero-day chain against a fully patched VPN appliance top a…
-
Threat digest: 2026-10-13
Maximum-severity flaws in GitLab, the Bricksforge WordPress plugin and SonicWall SMA1000 appliances drove both urgent patching and exploitation activity, a confirmed hardware implant in Ledger wallets sold through…