News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 1 article
-
Mirai Botnet Tries to Exploit PHP2Shell, but Finds No Way In
Researchers have linked attempts to exploit PHP2Shell to a Mirai-derived botnet, with new ASLR-bypass exploits emerging, though no confirmed in‑the‑wild compromise has yet been demonstrated. Two days after PHP issued emergency fixes for the PHP2Shell flaws,…
Thu 22 Oct· 2 articles
-
Attackers Target Critical PHP Flaws Before Patches Were Released
SecurityWeek reports a coordinated industry and government response to two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, which allow unauthenticated remote code execution. The bugs were identified by Wiz, OpenAI and Calif in August, with PHP…
-
Over a Million PHP Systems Face Exploitation After RCE Flaws Go Public
Security researchers tracked a rapid surge of exploitation activity targeting two critical PHP RCE flaws, now tracked as CVE-2026-109618 and CVE-2026-109619, with patches released on 21 October after an embargo and weeks of coordinated disclosure. Initial…
Wed 21 Oct· 2 articles
-
PHP Patches PHP2Shell Flaws After Attack Attempts Target Servers
PHP has issued patches for two critical vulnerabilities, named PHP2Shell, which can yield unauthenticated remote code execution (RCE) on web servers running PHP. The flaws are tracked as CVE-2026-109618 (out-of-memory corruption) and CVE-2026-109619 (stale…
-
Critical PHP2Shell flaws could expose servers to remote code execution
Details of two critical PHP vulnerabilities, dubbed PHP2Shell, have leaked online before the planned coordinated disclosure and release of fixes. Tracked as CVE-2026-109618 and CVE-2026-109619, both have a CVSS score of 9.2 and could allow remote code…
No older articles match these filters.