UNIFIED INTELLIGENCE CORPUS
Уязвимости, патчи, атаки, утечки, исследования и репринты — связанные в единое досье, без потери первоисточника.
The unnamed soldier was arrested by British counterterrorism police “working closely” with U.S. authorities, including the FBI and the military, the Metropolitan Police said in a statement.
An exploited Outlook vulnerability drew most of the attention in Microsoft's latest Patch Tuesday, which listed 1,093 bugs total.
Fireworks said the incident affected a “limited number of customer accounts” — all of whom were notified of the attack.
Cybercriminals are infecting devices on a large scale with spyware, increasingly compromising systems belonging to average people, according to a new report.
Michael LoSapio, Palantir's chief information security officer, is officially President Donald Trump's pick to lead the Cybersecurity and Infrastructure Security Agency.
Microsoft Office Outlook содержит отсутствующее пользовательское взаимодействие для потенциально небезопасных уязвимостей действий, которые позволяют несанкционированному злоумышленнику осуществлять мошенничество в сети.
Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of the proxy services is a Russian company whose founder's web hosting business was ground zero for cyberattacks against election systems in Arizona and Illinois in 2016.
Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet's access to more than 10 million additional compromised systems, including other Internet of Things (IoT) products such as Android-based healthcare devices and karaoke machines.
22.10.2026 — CVE-2026-109618, CVE-2026-109619 (PHP2Shell) — удаленное выполнение кода в PHP {#CVE-2026-109618} Идентификаторы CVE (CVE ID): CVE-2026-109618, CVE-2026-109619. Ссылки на CVE: CVE-2026-109618. CVE-2026-109619. Ссылки на NVD: <https://nvd.nist.gov/vuln/detail/CVE-2026-109618>. <https://nvd.nist.gov/vuln/detail/CVE-2026-109619>. Исходный отчет {#original-report-CVE-2026-109618} Отчет Wiz Research о PHP2Shell. Краткое описание {#brief-description-CVE-2026-109618} PHP2Shell — две связанные уязвимости в интерпретаторе PHP, которые позволяют удаленно и без аутентификации выполнить произвольный код с правами рабочего процесса веб-сервера или получить данные из памяти процесса. Уязвимости связаны с обработкой ошибок и состоянием PHP между запросами: CVE-2026-109618. При нехватке памят
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions.
Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity.
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle "Rey," was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey's father -- Royal Jordanian Airlines.