2026-10-25
2026-10-24
Step Security
OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found
Sansec Threat Research
deepveindrilling.com: Magento CMS block loader hits 953 stores
2026-10-23
Schneier on Security
Friday Squid Blogging: Increasing Squid Populations
Microsoft Security
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
Ars Technica Security
Knicks sent employees fake offer of championship rings in phishing test: Report
The Citizen Lab
Built-In Weakness: Lawful Access and Encryption in the Age of AI-Powered Cyber Threats
NVISO Labs
PHP2Shell Operational Guidance
Dark Reading
Why Caribbean Threats Cascade Into Global Cyber-Risk
MIT Technology Review
The Download: testing six tech promises and biotech’s blind spots
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
Schneier on Security
Compromised TLS Certificates
MIT Technology Review
In the biotech world, you can’t see everything
DarkRelay
OWASP Top 10 Penetration Testing
Dark Reading
State Bank of India Suffers a Customer PII Data Leak
Okta Security
Node2Shell: Node.js Brotli flaw (CVE-2026-111497)
Elastic Security Labs
How CVE-2026-73570 turns a Zimbra log file into remote code execution
2026-10-22
MIT Technology Review
Designing an AI serving harness built to last
Dark Reading
What We Missed: Feds Lasso Texas Laptop Farms
Ars Technica Security
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Black Hills Info Sec
Detection Engineering: Stop Drowning in Alerts and Start Catching Bad Guys
MIT Technology Review
The Foundations of Scalable AI
Talos Intelligence
I had plans for that second
Github Security Blog
How bug bounty sharpens one researcher’s security skills
The Citizen Lab
How Generative AI is Scaling Transnational Repression
Ars Technica Security
Hackers got a four-day head start on epic PHP2Shell vulnerability
Malwarebytes
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
Schneier on Security
New Serious PHP Vulnerabilities Released and Patched
Bishop Fox Security
The True Blast Radius of an AI Attack
Eye Security Research
PHP2Shell: Our assessment of the risk for systems running PHP
MIT Technology Review
The Download: computing’s next leap and permafrost’s climate threat
CISA Alerts & Advisories
Siemens APOGEE, TALON and Desigo PXC/PXM Products
CISA Alerts & Advisories
Siemens SIMATIC S7 PLCs Web Server
CISA Alerts & Advisories
Siemens SIMATIC S7-1500 TM MFP
CISA Alerts & Advisories
Kiloview E3 NDI Encoder
CISA Alerts & Advisories
Siemens SENTRON 3NA COM Fuse
CISA Alerts & Advisories
Managing AI Token Consumption for Operational Resilience
CISA Alerts & Advisories
Siemens Industrial Edge Devices
CISA Alerts & Advisories
Siemens SIMATIC IPCs
CISA Alerts & Advisories
Siemens RUGGEDCOM CROSSBOW Station Access Controller
CISA Alerts & Advisories
Siemens SIMATIC S7 Webserver API
CISA Alerts & Advisories
Siemens Software Center
CISA Alerts & Advisories
Siemens RUGGEDCOM CROSSBOW
CISA Alerts & Advisories
Siemens RUGGEDCOM APE1808 Devices
CISA Alerts & Advisories
Siemens Industrial Edge App Publisher
CISA Alerts & Advisories
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
CISA Alerts & Advisories
Siemens WinCC
CISA Alerts & Advisories
Siemens Industrial Edge Device Kit
CISA Alerts & Advisories
Siemens Capital Embedded AR Classic
CISA Alerts & Advisories
InterSystems Corporation InterSystems IRIS for Health
CISA Alerts & Advisories
Siemens PSS(R)SINCAL
Ars Technica Security
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Eye Security Research
Operation IXIM: Preventing a botnet of millions of Popcorn Time users
Step Security
litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader
MIT Technology Review
Making the case for context-aware AI
MIT Technology Review
Three things you should know about permafrost
Escape DAST
php2shell (CVE-2026-109618 + CVE-2026-109619): unauthenticated RCE in PHP core, now detected by Escape
MIT Technology Review
AI’s hidden storage bill: What inference leaves behind
TrustedSec
Trimarc, 18 Months Later at TrustedSec
Amazon Security
Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Okta Security
Okta's Response to PHP2Shell
Datadog HQ
Optimize AI costs with Agent Observability
2026-10-21
Amazon Security
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot
Talos Intelligence
Compromised eMudhra intermediate certificates
Dark Reading
Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
Microsoft Security
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
Amazon Security
Best practices for integrating IAM Roles Anywhere with your PKI
Malwarebytes
PHP2Shell: Why many websites had to go offline
Palo Alto Networks
Millions of PHP Instances Exposed - What Organizations Need To Do Right Now
Dark Reading
Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk
Socket
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
Krebs on Security
Widespread PHP Flaw May Cause Many Site Outages Today
Talos Intelligence
Two critical RCEs in PHP core
MIT Technology Review
The Download: introducing the Impossible issue
CISA Alerts & Advisories
Critical Vulnerabilities in PHP Require Immediate Patching
Palo Alto Networks
Advancing Agentic AI Security with Palo Alto Networks and NVIDIA
Schneier on Security
Workshop on Economics and Information Security (WEIS) Archive
Talos Intelligence
Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers
MIT Technology Review
We can do impossible things
Ars Technica Security
PHP warns it plans to release 2 emergency patches imminently
Fastly
Fastly’s Proactive Protection for PHP2Shell, Critical PHP RCE CVE-2026-109618 and CVE-2026-109619
Nebula Security
Investigating the PingCAP Security Incident: Credential Exposure and Cloud Data Collection
Flatt Security Research
Software Supply Chain Attack on LiteLLM: Overview and Response Guidance
GMO Flatt Security Research
Software Supply Chain Attack on LiteLLM: Overview and Response Guidance
Snyk
AI Is Calling In Every Risk You've Accepted: Seven Insights From The AI Security Panel: Unfiltered
Sansec Threat Research
PHP2Shell: PHP RCE (CVE-2026-109618, CVE-2026-109619)
Elastic Security Labs
php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619
2026-10-20
Ars Technica Security
The Internet goes on high alert after discovery of 8 compromised TLS certs
Amazon Security
Managing identity source transition for AWS IAM Identity Center
Talos Intelligence
There's only so much code: the rise in vulnerability numbers
ReversingLabs
Why the Tools You Already Own Won’t Make You PQC-Ready
Mozilla Security
Protecting Firefox users following the compromise of eMudhra intermediate certificates
Ars Technica Security
Meta Muse exposes users' personal and business secrets when they share conversations
CISA Alerts & Advisories
Hitachi Energy MicroSCADA X SYS600 Product
CISA Alerts & Advisories
Hitachi Energy RTU500 Product
CISA Alerts & Advisories
#StopRansomware: SafePay Ransomware
CISA Alerts & Advisories
HMS Networks PEAK-System PCAN Windows drivers
CISA Alerts & Advisories
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA Alerts & Advisories
Moxa AIG-302 ThingsPro Edge
Schneier on Security
Possible new Cellebrite iPhone Radio Zero-Day
TrustedSec
Handling Pre-Contract FCI and CUI
Infernux Blog
Meat_proxy_01, reporting for duty!
RCE Security
Imperia CMS SiteActive TEMPLATE Unauthenticated SSTI Remote Code Execution (CVE-2026-110355)
2026-10-19
Ars Technica Security
PSA: Patch your Plex media server before someone hacks it
Meta Security
GenRecs Tokenization: Transforming Ads Recommendation at Meta with Stable Model Vocabulary
Meta Security
The Thin Orchestrator: How We Made Our AI Agents More Reliable by Giving the Router Less to Do
Rapid7
CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild
Krebs on Security
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Microsoft Security
Agents are your newest insiders. Security must move at their speed.
Palo Alto Networks
Reinventing Endpoint Security with Cortex XDR One
Palo Alto Networks
Introducing Unit 42 Managed Agentic Endpoint Security
Schneier on Security
Training AIs to Solve CAPTCHAs
Malwarebytes
A week in security (October 12 – October 18)