Security
PHP2Shell: Critical PHP Flaws Allow Remote Code Execution
php2shell (CVE-2026-109618, CVE-2026-109619): critical unauthenticated RCE in PHP core. Patch out Oct 21. WordPress, Magento, Drupal affected.
Cyber Kendra — Cybersecurity & Tech News
CATEGORY
Latest Posts
PHP2Shell: Critical PHP Flaws Allow Remote Code Execution
php2shell (CVE-2026-109618, CVE-2026-109619): critical unauthenticated RCE in PHP core. Patch out Oct 21. WordPress, Magento, Drupal affected.
PHP RCE Zero-Days CVE-2026-109618, CVE-2026-109619 Leak Early
CVE-2026-109618 and CVE-2026-109619: PHP will patch leaked critical flaws on October 21 at 14:00 UTC. Both are rated…
OneDrive Copilot Update: Hero Links, 1M Sync & New AI Tools
Microsoft’s OneDrive update adds Copilot reports and file organising, Hero Link sharing, 1M-item sync and an odsync admin…
Laravel Patches Critical Token Guard Auth Bypass
Laravel has disclosed a critical authentication bypass in its built-in token API guard that lets unauthenticated attackers log…
Cellebrite Advanced Unlocks Leak: Wireless iPhone Unlock
Leaked Cellebrite flyer details Advanced Unlocks, an appliance said to unlock iPhone 11–16 from 8 metres, even with…
FortiSIEM RCE Flaw CVE-2026-106173 Gets Public PoC
Security researchers at Horizon3.ai on Monday published a working proof-of-concept exploit for a critical FortiSIEM vulnerability that lets…
Go Blocks Compromised eMudhra CA Keys in Emergency Update
The Go team released emergency updates late Monday that caused the language’s certificate verifier to reject eight intermediate…
OVHcloud CLI Hack: Account Hijacked Since March
OVHcloud CLI v0.11.0–v0.15.0 were swapped for a secrets stealer via a GitHub account researchers link to GlassWorm. Who’s…
Google Cloud Outage: Revolut, HSBC, Lloyds Down in the UK
Google Cloud's London outage, caused by a power event, disrupted Revolut, HSBC, Lloyds, Royal Mail and DPD. Here's…
Claude Code Finds XMRig Crypto Miner on Mac
Claude Code found an XMRig crypto miner using 12 cores and pushing a Mac to 112°C while building…
Pegasus Spyware Infected Belgrade Rector’s iPhone
Citizen Lab confirms Pegasus spyware hacked Belgrade University rector Vladan Đokić’s iPhone; Apple warned Trump Tower case prosecutor.
Rank Math Hacked in Supply Chain Attack, Shipped a Self-Rebuilding Backdoor
Rank Math has confirmed that some copies of Rank Math PRO 3.0.123, the paid add-on to one of…
Handy Tech Tools
Quick browser-based utilities. Check IMEI numbers, create Wi-Fi QR codes, decode JWTs, generate hashes, run DNS lookups, and more without installing anything.