PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run code on vulnerable web servers. Tracked as CVE-2026-109618 and CVE-2026-109619, and collectively called PHP2Shell, the flaws affect PHP’s handling of memory during web requests. …

APT28 Hackers Open Secret SSH Tunnel Into NATO Country’s Naval Shipbuilder Network

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Russian cyberespionage group APT28 used the Hookedge backdoor to reach a naval shipbuilder’s network in a NATO member state, steal login material and set up a hidden SSH tunnel. The intrusion lasted at least two months, according to a report …

Hackers Hijack 333 Tor Exit Nodes to Intercept SSH Logins and Steal Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers compromised 333 Tor exit nodes and redirected SSH connections to password-stealing servers, according to a researcher’s account published October 20, 2026. The campaign began October 2 and targeted unencrypted email traffic alongside remote server logins. The affected nodes represented …

Google Releases Massive Chrome Security Update Fixing 353 Flaws, Including 6 Critical Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released Chrome 156 for Windows, macOS, and Linux on October 20, 2026, fixing 353 security flaws, including six critical bugs across graphics, accessibility, rendering, and communication features. Google says the release will reach users over the coming days and …

Industrial Defender Unifies Endpoint Intelligence and Network Monitoring for CIP-015, Adds Risk Signal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Orlando, Florida, United States, October 20th, 2026, CyberNewswire Industrial Defender Unifies Endpoint Intelligence and Network Monitoring for CIP-015, Adds Risk Signal to Turn Findings into Prioritized Patch Plans New internal network security monitoring correlates every anomaly with deep asset intelligence; …

Scattered Spider Hackers Exploit Help Desk Calls to Bypass MFA and Breach Corporate Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A convincing phone call can be enough to open a path into a company network. Scattered Spider has repeatedly used social engineering to persuade help desk workers to reset passwords or move multi-factor authentication (MFA) to a device controlled by …

Rust 1.100 Introduces Cargo Security Cooldowns to Prevent Malicious Dependency Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Rust 1.100 will introduce optional security cooldowns in Cargo, giving developers a way to delay newly published dependencies before they enter projects. Scheduled for November 12, 2026, the release aims to give security teams and package maintainers time to spot …

Cloudflare Detects Early Exploitation Attempts Targeting Two Leaked PHP Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cloudflare says it is seeing early attempts to exploit two critical PHP vulnerabilities whose details surfaced before the PHP security team’s planned release. The company has deployed an initial set of Web Application Firewall (WAF) rules to block known exploit …

Hackers Use Claude AI to Plan Ransomware Attacks, Then Accidentally Expose Their Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ransomware operators used commercial AI tools to help plan intrusions, manage victim information and prepare extortion, according to a new investigation. But the systems they relied on also kept detailed records of their work. A publicly accessible server exposed AI …

Massive Oracle Security Update – 1295 Flaws Patched, Including Critical E-Business Suite Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Oracle has released its October 2026 Critical Patch Update, delivering 1,295 new security patches across its software portfolio. Published on October 20. The update includes a maximum-severity Oracle E-Business Suite vulnerability that allows attackers without login credentials to take over …