Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Security news

Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.

advisoryvia CISA Cybersecurity Advisories

Critical Vulnerabilities in PHP Require Immediate Patching

Update October 26, 2026: CISA has updated this Alert to reflect the addition of CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities (KEV) Catalog on Oct. 2...

Oct 21, 2026 UTC
advisoryvia CISA Cybersecurity Advisories

#StopRansomware: SafePay Ransomware

Advisory at a Glance Title #StopRansomware: SafePay Ransomware Original Publication October 20, 2026 Executive Summary This advisory details recent activity by the SafePay ran...

Oct 20, 2026 UTC
advisoryvia CISA Cybersecurity Advisories

Hitachi Energy RTU500 Product

View CSAF Summary Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. These vulnerabilities if exploited can have impact on co...

Oct 20, 2026 UTC
advisoryvia CISA Cybersecurity Advisories

Moxa AIG-302 ThingsPro Edge

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information. The following versions of Moxa AIG-302 T...

Oct 20, 2026 UTC
advisoryvia CISA Cybersecurity Advisories

Hitachi Energy MicroSCADA X SYS600 Product

View CSAF Summary Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be explo...

Oct 20, 2026 UTC
advisoryvia CISA Cybersecurity Advisories

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-96652 Plex Media Server Server-Side...

Oct 20, 2026 UTC
vulnerabilityvia SANS Internet Storm Center

PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)

This morning, we returned to Infocon Green. As usual, we are raising the Infocon to alert you to emerging situations requiring immediate attention. PHP fit that description. By now...

Oct 23, 2026 UTC
advisoryvia CERT/CC Vulnerability Notes

VU#763488: Memory corruption vulnerabilities in PHP

Overview Two memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. An unauthenticated remote attacker with network acces...

Oct 22, 2026 UTC
vulnerabilityvia Krebs on Security

Widespread PHP Flaw May Cause Many Site Outages Today

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities...

Oct 21, 2026 UTC