CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct9 so far
Exploited only
5 articles · 21–23 Oct

Fri 23 Oct· 2 articles

  1. PHP Warns of Unpatched RCE Risk in Rare Session Configurations

    PHP has warned of a fresh, unpatched RCE pathway on web servers, just two days after it released emergency fixes for the PHP2Shell flaws. The new issue, tracked as CVE-2026-115560, affects only web applications that are configured in a narrow, unusual way…

    The Hacker NewsCVE-2026-115560CVE-2026-115560
  2. Attackers exploit PHP2Shell flaws to build a Mirai derived botnet

    Threat researchers warn that attackers are probing PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619; CVSS 9.2) to drive infected hosts into a Mirai-derived botnet variant named Potassium. The exploits revolve around unauthenticated remote code…

    The Hacker NewsCVE-2026-109618CVE-2026-109618

Thu 22 Oct· 1 article

  1. Amazon Detects PHP2Shell Exploit Attempts Targeting Its Honeypot

    Amazon’s Threat Intelligence team detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on 17 October 2026, targeting its MadPot honeypot service. The activity originated from an IP address tied to a commercial anonymisation service…

    The Hacker NewsCVE-2026-109618CVE-2026-109618

Wed 21 Oct· 2 articles

  1. PHP Patches Critical Unauthenticated Flaws That Expose Web Servers

    PHP has issued emergency patches for two critical PHP2Shell remote code execution flaws that allow an attacker to run code on a web server without an account. The fixes are included in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team cautions that…

    The Hacker NewsCVE-2026-109618CVE-2026-109618
  2. PHP Prepares Emergency Fixes for Two Critical RCE Flaws

    PHP has issued an out-of-cycle security release addressing two critical PHP RCE flaws, collectively nicknamed php2shell, with a CVSS v4.0 score of 9.2. The vulnerabilities are identified in the leak as CVE-2026-109618 and CVE-2026-109619. Researchers from…

    The Hacker NewsCVE-2026-109618CVE-2026-109618

No older articles match these filters.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device