IT-Sicherheitsmeldungen & Cyber Threat Radar

Sicherheitslücken (CVE) SANS Internet Storm Center,…

(Reliable)? php2shell exploitability, (Fri, Oct 23rd)

Yesterday everyone was running around like crazy (me included :) because of the php2shell vulnerability.

Malware / Trojaner / Viren Cybersecurity Dive

PHP exploitation moves at slower-than-expected pace, but millions remain at risk

Security researchers flag botnet activity, but successful compromises have yet to break through.

IT Security Nachrichten IT Security News

Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks

Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials…

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-47636 | OutSystems Service Studio 11 11.53.30 Build 61739 av_libGLESv2.dll uncontrolled search path (Exploit 51678 / EUVD-2022-50395)

A vulnerability was found in OutSystems Service Studio 11 11.53.30 Build 61739 and classified as problematic.

IT Security Nachrichten eSecurityPlanet

Critical Exploits, Ransomware and Agentic AI Reshape Cyber Risk

Weekly summary of Cybersecurity Insider newsletters

Sicherheitslücken (CVE) Cyber Security News 3 Quellen

New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data

Researchers has demonstrated Node2Shell, a working exploit that lets an attacker run code inside a Node.

IT Security Nachrichten Cybersafe News 6 Quellen

Massive PHP2Shell Exploit Attempts Target Millions Worldwide

An alarming surge in cyber attacks has emerged as hackers ramp up their attempts to exploit vulnerabilities associated with PHP2Shell, targeting…

IT Nachrichten Latest from TechRadar

AWS says hackers tried to exploit PHP security issues days before fix — as Cloudflare CEO says it saw a huge rise in targeted attack attempts

Evidence suggests PHP2Shell exploitation began days before public disclosure, indicating prior attacker knowledgeResearchers say real-world attacks…

Sicherheitslücken (CVE) Cyber Security News 3 Quellen

Hackers Actively Exploiting Critical VeloCloud Orchestrator Flaw to Gain Superuser Access

Hackers are actively exploiting a critical SQL injection flaw in VeloCloud Orchestrator (VCO) that allows logged-in users to gain superuser operator…

Sicherheitslücken (CVE) Cyber Security News 4 Quellen

Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware

Public proof-of-concept code for two critical PHP vulnerabilities is now available, and attackers have tried to use the flaws to deploy botnet…

Malware / Trojaner / Viren SecurityWeek

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet.

IT Security Nachrichten IT Security News

27 arrests and 248 potential victims identified in action week against labour exploitation

Europol, the European Labour Authority (ELA), and 34 participating countries today announced the results of an action week targeting human…

IT Security Nachrichten IT Security News 2 Quellen

PoC Exploit Released for Two Critical PHP RCE Vulnerabilities as Hackers Launch Attacks

Public proof-of-concept exploit code targeting two critical PHP vulnerabilities has surfaced as attackers scan exposed servers and attempt…

Sicherheitslücken (CVE) Cyber Security News

Hackers Exploit Critical Citrix NetScaler RCE Flaw to Deploy Web Shells and Malware

A critical flaw in Citrix NetScaler ADC and NetScaler Gateway is being used to run commands on exposed appliances, install web shells and deliver…

IT Security Nachrichten IT Security News

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago.

IT Security Nachrichten IT Security News 2 Quellen

Critical Fortinet FortiSIEM Flaw (CVE-2026-106173) Public Exploit Released

HOC Shorts |  Security agencies issued urgent advisories for a CVSS 9.8 critical vulnerability (`CVE-2026-106173`) impacting Fortinet FortiSIEM,…

Sicherheitslücken (CVE) IT Security News

AI agents behind ConnectWise breach, PHP2Shell exploited days before patches, Japanese cloud hack

PHP Exploited Before Patch, Unpatched Linux SMB Bugs, GitLab Max-Severity Fix, and AI Agents in ConnectWise & Japan Breaches Cybersecurity Today…

IT Security Nachrichten Malware-Traffic-Analysis.net

2026-10-16: Coruna-like iOS exploit kit traffic

IT Security Nachrichten IT Security News

Threat Brief: Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)

Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257.