ICYMI: 2026-10-23
Latest Headlines
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Atlassian Patches 75 Flaws in Data Center and Server Products
Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
WhatsApp May Stop Working Without Registered SIM Under New Rules
Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands
HPE Warns Critical Aruba Networking Flaws Could Let Hackers Take Complete Control of Devices
Japanese Game Maker Capcom Has Confirmed – 11,774,247 Customer Records Exposed
Multiple Waves of DDoS Attacks Caused This Week’s Outage in North Korea
Hackers Actively Exploiting Critical VeloCloud Orchestrator Flaw to Gain Superuser Access
StealC Malware Returns as New Stadia RAT to Steal Passwords and Secretly Control Windows PCs
Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware
Hackers Use New BlackX Bootkit to Bypass Windows Secure Boot on Fully Patched Systems
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft: Windows Server 2016 reaches end of support in January
Quest Diagnostics confirms data breach exposed patient records
PHP shares mitigation for new RCE vulnerability with no patch
HPE patches eight max severity RCE and auth bypass AOS flaws
– MTZ