News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 3 articles
-
PHP Memory Exploit’s Real World Potential May Be Limited
Security researcher Bojan Zdrnja provides a cautious take on the recently discussed php2shell exploitability. After examining published proofs of concept (PoCs), he argues that building a universal, reliable one-click exploit is far from straightforward, and…
SANS ISC
-
PHP Patches Arrive Before Exploits, but Vulnerable Devices Remain at Risk
This morning, we returned to Infocon Green. As usual, we are raising the Infocon to alert you to emerging situations requiring immediate attention. PHP fit that description. By now, you either know about it, or you probably never will, so it is time to go…
SANS ISC
-
PHP Exploits Are Probing Targets as Patches Roll Out Worldwide
The latest SANS Internet Storm Center podcast update centres on ongoing patch activity and recent vulnerability disclosures. The host notes that patches for the long‑running PHP vulnerability are widely available from many vendors, though some devices such…
SANS ISC
Thu 22 Oct· 1 article
-
Critical PHP flaws enable remote attacks on websites and appliances
On 22 October 2026, SANS ISC’s Stormcast focused on a critical PHP vulnerability that has widespread impact because PHP is used by roughly 60% of websites and many network appliances run PHP as well. The discussion notes that the flaw is in the PHP…
SANS ISC
Wed 21 Oct· 2 articles
-
Critical PHP flaws enable remote code execution as exploit PoCs emerge
SANS ISC reports a critical PHP vulnerability affecting the PHP core, tracked as CVE-2026-109618 and CVE-2026-109619. PHP[.]net announced a critical update and the information ConIns notes that the information level has been raised to YELLOW due to the…
-
eMudhra Revokes Eight CAs After Private Keys Were Created One Byte Long
Eight intermediate certificate authorities from Indian firm eMudhra have had their certificates revoked after a script error during a key-creation ceremony produced private keys only one byte long. The issue primarily affects personal signing certificates…
Tue 20 Oct· 1 article
-
Plex Flaw Chain Enables Unauthenticated Remote Code Execution
The latest SANS ISC Stormcast covers a cluster of recent security concerns with practical implications for operators of AI systems, network devices and consumer services. It begins by stressing how to contain AI agents, emphasising restricted permissions,…
SANS ISC
Sun 18 Oct· 1 article
-
YARA Rule Flags Orphaned VBA Projects Hidden in DWG Files
The SANS ISC diary entry discusses a YARA rule used to detect a specific pattern described as “Orphaned VBA Projects Inside DWG Files.” The rule searches for the string “AC10” at the start, a 32-bit binary sequence at offset 0x24, a D0 CF 11 E0 A1 B1 1A E1…
SANS ISC
Fri 16 Oct· 2 articles
-
Panchan Worm Steals SSH Keys as Cisco and Ivanti Patch Flaws
In the latest SANS Internet Storm Center podcast for Friday 16 October 2026, the discussion centres on several active exploitation campaigns and vendor patches affecting enterprise security gateways and management interfaces. The hosts describe Panchan’s…
SANS ISCPanchan
-
Stop Trying to Cage AI Agents and Give Them Narrower Jobs
The diary post argues that the cybersecurity industry may be approaching AI security the wrong way by trying to cage powerful general‑purpose agents rather than designing smaller, focused tools. The author notes that modern AI agents can code, run shells,…
SANS ISC
Thu 15 Oct· 2 articles
-
Ledger Wallet Hardware Implants Could Steal Cryptocurrency Seed Phrases
In the 15 October 2026 edition of the SANS Internet Storm Center’s Stormcast, the host reports on several distinct security concerns discussed in previous updates. First, Visual Basic for Applications (VBA) scripts embedded in AutoCAD files are again in…
SANS ISC
-
Panchan Cryptomining Worm Targets Exposed Systems Through SSH Attacks
A guest diary from Zachary Norwood describes the Panchan worm, a long-running crypto mining botnet that propagates via multiple methods and remains active despite the passage of time. The entry notes that the worm was obtained from the DShield honeypot after…
SANS ISCPanchan