The PHP Foundation issued an emergency security patch for two critical vulnerabilities in its widely used web programming language, prompting the Netherlands, Denmark, France and Finland to take some government websites offline as a precaution. Canada's Minister of Artificial Intelligence and Digital Innovation, Evan Solomon, confirmed Canada also took sites down temporarily and urged PHP users to update immediately. The flaws, present in PHP versions released over roughly 20 years, were reportedly discovered using AI tools employed by cybersecurity firms.
engadget.com
· 2026-10-21
CISA has issued an alert that attackers are actively exploiting four vulnerabilities in Plex Media Server, collectively named Plex2Shell, which when chained together let an attacker obtain an admin token and execute code with elevated privileges. The flaws were found by researcher Zach Main, disclosed to Plex in July, and published with proof-of-concept code in mid-October, after which exploitation attempts began targeting honeypots to deploy cryptominers. CISA has ordered federal agencies to patch or mitigate affected systems by October 23, with fixes available in Plex Media Server version 1.43.3.10861 and later.
bleepingcomputer.com
· 2026-10-21
CISA, the FBI, the US Secret Service, and law enforcement agencies in Germany and the UK issued a joint advisory stating the SafePay ransomware gang has compromised more than 600 critical infrastructure organizations across North America, South America, Europe and Australia since August 2024. The agencies said SafePay actors gain access through credential theft, brute-force attacks, and VPN exploitation, particularly targeting Mullvad VPN IP addresses, and often delete shadow copies and reset network-attached storage to hinder recovery.
bleepingcomputer.com
· 2026-10-21
ProPublica reports that the Department of Homeland Security directed the Cybersecurity and Infrastructure Security Agency to acquire a voting machine and test it for security flaws, citing two anonymous former officials. The same report says CISA staff were angered by the order, and that Elon Musk's DOGE initiative had already laid off CISA employees with the technical expertise to carry it out, leaving officials to tell the White House the task was not feasible.
futurism.com
· 2026-10-20
The Department of Homeland Security has issued an order requiring federal civilian agencies to stop procuring and remove DeepSeek products, affiliate offerings, and third-party tools built on DeepSeek technology from government systems. Agencies must request exceptions within 60 days, with CISA reviewing and approving or denying those requests. The order applies only to agencies under DHS authority and does not ban private or consumer use.
bleepingcomputer.com
· 2026-10-20
According to two former administration officials, political appointees at the Department of Homeland Security asked CISA to secretly acquire a voting machine, hack it and report findings to the White House without notifying the manufacturer. CISA staff pushed back, calling the request a departure from standard practice, and the plan was ultimately not carried out partly because staff capable of the task had been laid off under Elon Musk's DOGE initiative.
politics.slashdot.org
· 2026-10-19
CISA is directing admins to immediately patch CVE-2026-104935, a high-severity authentication bypass in Ivanti Connect Secure that has been exploited as a zero-day since at least October 1. Ivanti released patched versions on Tuesday, and researchers at Volexity and Defused say an unknown threat actor chained the bug with two other flaws to gain unauthenticated root access and steal Active Directory credentials, LAPS passwords and BitLocker keys.
bleepingcomputer.com
· 2026-10-14
CISA has issued an advisory for CVE-2026-84411, a critical integer underflow bug in MikroTik RouterOS's web-management HTTP handling that can be triggered before authentication. A single crafted request could let an unauthenticated attacker execute code as root or crash the device. Versions below 7.24 are affected, and the agency says the vendor advises upgrading to 7.23 or later, though it hasn't published its own advisory yet.
bleepingcomputer.com
· 2026-09-30
CISA has directed federal agencies to fix two critical NetScaler vulnerabilities, CVE-2026-88771 and CVE-2026-88772, that Citrix confirmed are being actively exploited in zero-day attacks. Both bugs let unauthenticated attackers achieve remote code execution, with the first hitting default configurations and the second requiring DTLS, which is on by default for VPN virtual servers. Citrix has issued patches and shared indicators of compromise, after agencies like the Dutch NCSC had already been privately warning organizations to shut down affected appliances.
bleepingcomputer.com
· 2026-09-28
Kiteworks, the file-transfer software maker formerly known as Accellion, has warned customers to shut down their systems after receiving what it called credible threat intelligence from law enforcement about a possible attack as soon as this weekend. CISO Frank Balonis said the company is unaware of any actual breach and called the move a precaution against unknown zero-day vulnerabilities, while recommending customers update to its latest software release.
techcrunch.com
· 2026-09-25
CISA has confirmed active exploitation of four vulnerabilities: a maximum-severity JWT authentication bypass in WSO2 API Manager and related products (CVE-2026-5430), a critical Adobe Commerce flaw (CVE-2026-71362), a high-severity SharePoint code injection bug (CVE-2026-65660), and a medium-severity Mikrotik RouterOS SSH bypass (CVE-2026-67279). Federal agencies must patch or mitigate the two critical flaws by September 27. Security firm watchTowr said its honeypots captured forged-token exploitation attempts against WSO2 systems starting September 13.
bleepingcomputer.com
· 2026-09-25
The Cybersecurity and Infrastructure Security Agency published a plan detailing threats facing U.S. election systems ahead of November's midterm elections. The document also outlines services CISA is offering to state and local election officials to help safeguard voting infrastructure.
fastcompany.com
· 2026-09-24
GoKawiil