IncidentsExploitedCVE-2026-109618CVSS 9.25 min read
Check Point says attackers chained the PHP2Shell RCE bugs with a local privilege escalation to reach root, then deployed webshells, a backdoor framework and a wiper. It can't say who did it.
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.22 min read
A China-linked group chained the PHP flaws with a kernel privilege-escalation bug to get root on PAN-OS devices, while mass scanning against WordPress has yet to produce confirmed compromises.
VulnerabilitiesBrief2 min read
The bugs can let revoked client certificates through, expose some encrypted sessions to eavesdroppers, or bypass a certificate chain length cap, but each affects only a subset of deployments.
Threat intelExploitedCVE-2024-47575CVSS 9.82 min read
A suspected state-sponsored group used a FortiManager flaw for initial access, then a path traversal bug to gain root and deploy the PeerStitch implant, researchers say.
VulnerabilitiesExploitedCVE-2026-0257CVSS 7.82 min read
Palo Alto Networks says it continues to see ransomware actors abuse an authentication bypass in PAN-OS and Prisma Access that lets attackers set up unauthorized VPN connections.
