Global

Cybersecurity incidents with explicitly reported worldwide impact.

Friday 13 November 2026

PHP2Shell Flaws Used to Break Into Check Point Gateways and Wipe an ESXi Host

IncidentsExploitedCVE-2026-109618CVSS 9.25 min read13:18 UTC

Check Point says attackers chained the PHP2Shell RCE bugs with a local privilege escalation to reach root, then deployed webshells, a backdoor framework and a wiper. It can't say who did it.

Monday 26 October 2026

CISA and FBI: SafePay ransomware breached over 600 critical infrastructure orgs

Threat intelBrief2 min read12:05 UTC

A joint advisory says SafePay has hit at least 600 critical infrastructure organizations worldwide since August 2024, and warns that paying a ransom doesn't guarantee files come back.