Chinese actor chains PHP2Shell with kernel bug to breach US gov firewalls

1. Executive summary A suspected Chinese actor used a custom, non-public implementation of the PHP2Shell flaws (CVE-2026-109618 and CVE-2026-109619,

Qilin lists W Interactive (GB) on its ransomware leak site

1. Executive summary On 2026-10-29 the Qilin ransomware group listed W Interactive, a UK-registered victim, on its leak site, as indexed

Cisco ASA NULL pointer deref CVE-2026-76418 added to CISA KEV

1. Executive summary CVE-2026-76418 is a NULL pointer dereference in the Remote Access SSL VPN service of Cisco Secure Firewall ASA and

Anthropic-themed phishing emails bypass top secure email gateways

1. Executive summary Dark Reading reports that phishing emails using an Anthropic theme, described as carrying numerous obvious red flags, are reaching recipients through

North Korean actors operationalize AI to scale financial fraud

1. Executive summary Microsoft reports that North Korean operators are using generative and agentic AI to accelerate reconnaissance, job-themed social engineering, fraudulent worker