Threats & Security News

the latest cybersecurity threat alerts and industry happenings

PHP2Shell security flaws now successfully exploited in the wild Article Link: https://www.bleepingcomputer.com/news/security/php2shell-security-flaws-now-sucessfully-exploited-in-the-wild/ What does this mean for me? CISA Urges Critical

Summary: On Tuesday, October 21st, PHP announced 2 critical, unauthenticated remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. If exploited, these vulnerabilities

TeamViewer Patches High-Severity Vulnerabilities in Remote Access Software Article Link: https://www.bleepingcomputer.com/news/security/teamviewer-urges-users-to-patch-severe-flaws-as-soon-as-possible/ What does this mean for me? Malicious ChatGPT Custom GPTs

ShinyHunters Bypasses Firewall Protections in Oracle PeopleSoft Attacks Article Link: https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/ What does this mean for me? Citrix Confirms Two NetScaler

Chinese hackers use SparroWocky malware in govt espionage attacks Article Link: https://www.bleepingcomputer.com/news/security/chinese-hackers-use-sparrowocky-malware-in-govt-espionage-attacks/ What does this mean for me? CISA decides weekly

Passkey-Themed Phishing Attacks Lead to Microsoft 365 Data Theft Article Link: https://www.bleepingcomputer.com/news/security/passkey-themed-phishing-attacks-lead-to-microsoft-365-data-theft/ What does this mean for me? Florida DMV Database

Red Flags That Expose Fake North Korean IT Workers Article Link: https://www.darkreading.com/insider-threats/red-flags-expose-fake-north-korean-it-workers What does this mean for me? Fake Voicemail SVG

Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia Article Link: https://www.securityweek.com/threat-actor-hacks-14000-ip-cameras-in-ukraine-and-russia/ What does this mean for me? CISA warns

Zoom Patches Zero-Click Code Execution Vulnerability Article Link: https://www.securityweek.com/zoom-patches-zero-click-code-execution-vulnerability/ What does this mean for me? New Microsoft Defender ‘ShieldBreak’ Zero-Day Grants

Do You Want to Shore Up Your Defenses?

We're opening our first round of threat hunting engagements to 100 organizations. Sign up or join the wait list here.