1. Executive summary PHP2Shell covers two critical PHP engine flaws, CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2 and both allowing unauthenticated
1. Executive summary ESET documented an intrusion at a Ukrainian grain logistics company in which UAC-0099 gained initial access on 16 July 2025 through a
1. Executive summary Atlassian's October 2026 security bulletin covers 75 unique CVEs across Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira Software and Jira Service
1. Executive summary Two remote code execution flaws in KSMBD, the SMB server built into the Linux kernel, were disclosed on public mailing lists on 2026-
1. Executive summary eMudhra, one of the few Indian certificate authorities whose root is trusted by major browsers, is withdrawing from the global SSL/TLS certificate
1. Executive summary On 2026-10-22 the Everest ransomware group listed "PWC" (country GB) as a victim on its leak site, as indexed
1. Executive summary GitLab patched CVE-2026-110264, an integer overflow in regular-expression compilation that allows an unauthenticated attacker to execute arbitrary code on self-
1. Executive summary Unit 42 has published an analysis of OAuth-based phishing in which attackers obtain access and refresh tokens after a victim completes a
1. Executive summary CERT-FR published an advisory on 22 October 2026 covering three ISC BIND vulnerabilities disclosed by ISC the previous day: CVE-2026-94300
1. Executive summary BSI Germany published WID-SEC-2026-4099 on 2026-10-22, rated hoch, covering multiple vulnerabilities in Splunk SOAR. The advisory states an
1. Executive summary CrowdStrike reports four previously unreported threat actors running agentic AI campaigns between May and August 2026, in which large language model agents selected
1. Executive summary BSI Germany published WID-SEC-2026-4107 on 2026-10-22, rating multiple vulnerabilities in the Vaadin Java web framework as high severity.