Vulnerabilities & remediation
CISA Adds One Known Exploited Vulnerability to Catalog
CISA reports: CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-114625 Arista VeloCloud Orchestrator SQL Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Cybercrime & Fraud
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
The Hacker News reports: Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls.
Ransomware & Extortion
Quest Diagnostics warns of potential data theft after attack on lab service system
The Record reports: Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.
Vulnerabilities & remediation
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
The Hacker News reports: Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought.
Ransomware & Extortion
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
The Hacker News reports: Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an "Autonomous Red Team Kill Chain Framework" referred to as Phantom.
Vulnerabilities & remediation
(Reliable)? php2shell exploitability, (Fri, Oct 23rd)
SANS Internet Storm Center reports: Yesterday everyone was running around like crazy (me included :) because of the php2shell vulnerability.
Vulnerabilities & remediation
PHP shares mitigation for new RCE vulnerability with no patch
BleepingComputer reports: The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.
Vulnerabilities & remediation
PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)
SANS Internet Storm Center reports: This morning, we returned to Infocon Green. As usual, we are raising the Infocon to alert you to emerging situations requiring immediate attention. PHP fit that description. By now, you either know about it, or you probably never will, so it is time to go back to "business as usual".