php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Unveiling How Android Malware Slips...

The Google Cloud security team has recently shed light on a common issue where Android malware slips onto Google Play store. This method is used by hackers to evade the...

New Intel Downfall AVX2/AVX-512...

A new speculative execution vulnerability called Downfall, also known as GDS (Gather Data Sampling)- that affects multiple generations of Intel processors, has been discovered recently. The scope of Intel Downfall...

Linux malware infects 70,000...

A stealthy Linux malware called AVrecon has been used to infect over 70,000 Linux-based small office/home office (SOHO) routers, according to a report by Lumen’s Black Lotus Labs threat research...

Zimbra warns of critical zero-day...

Zimbra has warned of a critical zero-day security flaw in its email software that has been actively exploited in the wild. The vulnerability, which has been assigned the CVE identifier...

Microsoft discloses espionage attempt by...

Microsoft has revealed that a China-based hacking group, dubbed Storm-0558 was behind the calculated attempt to infiltrate email systems for intelligence collection purposes. The group breached email accounts of approximately...

SonicWall issues patch for vulnerabilities...

SonicWall has issued an urgent patch for critical vulnerabilities in its Global Management System (GMS) and Analytics network reporting engine software suites after they were discovered by the NCC Group....

Mastodon fixes critical...

The maintainers of the open source software that powers the Mastodon social network have released a security update that patches a critical vulnerability that could have allowed hackers to backdoor...

Meduza malware targets browsers, password...

A new malware dubbed Meduza Stealer has been discovered to be targeting Windows operating systems, and identified as a stealer of information from a large number of browsers, password managers,...

New TrueBot malware variant attacks...

A new variant of the TrueBot malware has been used in attacks against organizations in the United States and Canada. The malware is delivered via a remote code execution (RCE)...

AI voice cloning scams on...

According to IDIQ’s IdentityIQ 2022 Scam Report, there has been a surge in AI voice scams enabled by AI voice technology. Scammers are now able to create astonishingly realistic voices,...

BlackByte 2.0 ransomware attacks on...

A new report by Microsoft’s Incident Response team has found that there has been a surge in BlackByte 2.0 ransomware attacks. These attacks are characterized by their speed and destructiveness,...