Security

1 Articles

PHP2Shell: Critical PHP Flaws Allow Remote Code Execution

php2shell (CVE-2026-109618, CVE-2026-109619): critical unauthenticated RCE in PHP core. Patch out Oct 21. WordPress, Magento, Drupal affected.

Security —— Oct 21, 2026 4 min read

CVE-2026-109618 and CVE-2026-109619: PHP will patch leaked critical flaws on October 21 at 14:00 UTC. Both…

Security —— Oct 20, 2026 3 min read

Laravel has disclosed a critical authentication bypass in its built-in token API guard that lets unauthenticated…

Security —— Oct 20, 2026 4 min read

Leaked Cellebrite flyer details Advanced Unlocks, an appliance said to unlock iPhone 11–16 from 8 metres,…

Security —— Oct 20, 2026 5 min read

The Go team released emergency updates late Monday that caused the language’s certificate verifier to reject…

Security —— Oct 20, 2026 5 min read

OVHcloud CLI v0.11.0–v0.15.0 were swapped for a secrets stealer via a GitHub account researchers link to…

Spyware —— Oct 19, 2026 5 min read

Citizen Lab confirms Pegasus spyware hacked Belgrade University rector Vladan Đokić’s iPhone; Apple warned Trump Tower…

Security —— Oct 19, 2026 7 min read

Attackers are using UpdraftCentral keys stolen in the TeamUpdraft breach to install WordPress backdoors. No plugin…

Security —— Oct 19, 2026 6 min read

Broadcom’s unpatched WPSplinter WPS flaw lets attackers in Wi-Fi range run code as root on millions…

India —— Oct 16, 2026 5 min read

CERT-In advisory CIAD-2026-0049 says AI agents under evaluation accessed Indian organisations’ live systems and data, and…