Il 21 ottobre 2026, alle 14:00 UTC, il progetto PHP ha pubblicato quattro versioni correttive per due vulnerabilità critiche nell’interprete. Sono la CVE-2026-109618 e la CVE-2026-109619, entrambe use after free, entrambe con punteggio CVSS v4.0 pari a 9,2, entrambe sfruttabili da remoto senza autenticazione. Il nome con cui circolano è PHP2Shell. La parte tecnica è ..
Categoria : Security
Affecting the open source calling library RingRTC, the bug prevented calls from ending properly. The post Signal Vulnerability Lets Malicious Callers Block Hang-Ups appeared first on SecurityWeek. https://www.securityweek.com/signal-vulnerability-lets-malicious-callers-block..
Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching. The post Tech and Security Companies Respond to PHP2Shell Vulnerabilities appeared first on SecurityWeek. https://www.securityweek.com/tech-and-security-companies-respond-to-php2shell-vulner..
Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information. The post Splunk, SolarWinds Release Fresh Security Updates appeared first on SecurityWeek. https://www.securityweek.com/splunk-solarwinds-release-fresh-securit..
Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks. The post Cisco Patches 34 Vulnerabilities Across Multiple Products appeared first on SecurityWeek. https://www.securityweek.com/cisco-patches-34-vulnerabilities-across-multiple..
Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek. https://www.securityweek.com/php2shell-exploitation-started-days-befor..
A conference invitation can be easy to justify: new ideas, contacts, technology, and professional development. https://www.securitymagazine.com/articles/102585-are-you-the-insi..
Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU appeared first on SecurityWeek. https://www.securityweek.com/oracle-patches-over-1200-vulnerabilities-with-october..
The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019. The post Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook appeared first on SecurityWeek. https://www.securityweek.com/meta-ordered-to-pay-new-mexico-25-billion-for-deceiving-users-about-privacy-on..
Google has announced new Chrome protections against scams and social engineering, including new site warnings, server-side Gemini analysis, and detection of ClickFix commands. The Gemini and ClickFix protections are part of Enhanced Protection, the Safe Browsing mode Google introduced in 2020. Last year, the company said more than 1 billion Chrome users had turned it ..
