php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Red Hat Improves Software Supply...

Red Hat introduced a solution called the Red Hat Trusted Software Supply Chain that increases resistance to vulnerabilities in the software supply chain. This innovation introduces two new cloud services:...

Quantum computing threat to financial...

A detailed paper provided by Hudson Institute experts sheds light on the major consequences of quantum computing on the global financial system. The vulnerability of the Federal Reserve’s bank-to-bank transaction...

Dish Network notifies Maine AG...

Dish Network notified the Maine Attorney General of a data breach that occurred in February, informing them that approximately 296,000 people were affected by the incident. Dish Network disclosed the...

Seven Known Exploited Vulnerabilities Added...

CISA (Cybersecurity and Infrastructure Security Agency) added seven new Linux vulnerabilities to its known exploited vulnerabilities (KEV) catalog on May 12, 2023. These include Ruckus AP remote code execution (CVE-2023-25717),...

Red Hat Enterprise Linux 9.2:...

Red Hat has announced the release of Red Hat Enterprise Linux 9.2, the latest update to their Red Hat Enterprise Linux operating system series. RHEL 9.2 Linux has released six...

Phishing campaign targets tax...

As the U.S. tax season comes to a close, Microsoft warns that a new phishing effort is targeting accounting companies and tax preparers, planting malware that allows hackers to get...

New Variant of IceFire Ransomware...

A new variant of IceFire ransomware has been discovered that targets Linux systems. In the past, it has been found to target Windows only. This ransomware is known for targeting...

What Red Teams can teach...

“No plan survives contact with the enemy” is one of the truisms of conflict. It’s somewhat (un)surprising how accurately this describes the cybersecurity posture of most organizations. Best laid plans...

Cisco warns of authentication bypass...

A remote attacker could exploit multiple vulnerabilities in four Cisco small business routers to bypass authentication or execute arbitrary commands on an affected device. The flaws, which could affect Cisco...

IceID malware infiltrates Active Directory...

In a notable IcedID malware attack, the assailant impacted the Active Directory domain of the victim in less than 24 hours, transiting from initial infection to lateral movement in fewer...

Microsoft explains Zerobot malware’s new...

The Zerobot malware discussed in this blog post is unrelated to ZeroBot.ai, a GPT-3.5-powered verbal chatbot that shares the same name, and is also unrelated to the ZeroBot Raspberry Pi Zero...