Executive Summary PHP has released an advisory on 21 October 2026 detailing the vulnerabilities listed above, confirming the severity of CVE-2026-109618 and CVE-2026-109619. PHP is encouraging affected users to update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older will not receive relevant update packages to mitigate CVE-2026-109618 and CVE-2026-109619, but some distributions…
Read More
Executive Summary Eight intermediate certificate authority (CA) certificates operated by eMudhra have been comprised, triggering an industry-wide response from browser vendors, including Firefox and Chrome, operating system providers, and software maintainers after researchers discovered the certificates’ private keys could be derived from publicly available certificate data. The issue was not caused by a network intrusion…
Read More
Executive Summary On 14 October 2026, Group-IB researchers published an in-depth analysis of KGB RAT. KGB RAT is a Remote Access Trojan (RAT) for sale on the dark web under the pretense of a legitimate Remote Administration Tool targeting Windows platforms. KGB RAT operates with a MaaS (Malware as a Service) distribution model, and the…
Read More
Executive Summary A large-scale cyberattack targeting refrigeration systems at French supermarkets has highlighted the risks of internet-exposed operational technology (OT), with attackers remotely forcing refrigeration units into defrost mode and causing spoiled food, equipment damage, and significant financial losses. Beginning on 11 October, per a newly released report from Computer Emergency Response Team France (CERT-FR),…
Read More
Executive Summary A joint advisory, published on 8 October 2026, from multiple international government agencies, including FBI, CISA, NSA, and NCSC-UK, details how Integrity Technology Group, a company with links to the Chinese government, enables China-linked threat actors to compromise networks and steal sensitive data from organizations worldwide. The threat actors targeted multiple U.S. critical…
Read More
Executive Summary Cofense Intelligence is tracking email campaigns targeting the hospitality accommodation industry with fake guest complaints, negative reviews, and inquiry-related messages that deliver blockchain technology-abusing malware, via a report published 7 October 2026. The campaigns use links to archive files containing malicious LNK shortcut files masquerading as JPG images, which ultimately install either EtherRAT…
Read More
Somewhere in your organization this week, someone saved themselves a few hours by pasting company data into an AI tool nobody reviewed. They didn’t file a ticket, and they don’t think they did anything wrong. It’s tempting to treat that as a policy violation. It’s more useful to treat it as information. Every unsanctioned AI…
Read More
Executive Summary A joint law enforcement advisory conducted by the National Police Agency of Japan (NPA), National Cybersecurity Office of Japan (NCO), US Federal Bureau of Investigation (FBI), US Department of Defense Cyber Crime Center (DC3), Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), Germany Federal Intelligence Service (BND), and Germany Federal Office for…
Read More
Executive Summary An Infoblox cybersecurity report, published on 15 September 2026, has revealed that online casinos are being used to disguise and deploy malicious threats targeting governments across Asia. Infoblox researchers discovered that a computer script known as PeckBirdy is being embedded into Chinese-language casino websites to avoid detection by targets and security software. These…
Read More
Executive Summary Manchester Airports Group has disclosed on 27 August 2026 that an unauthorized third party accessed customer data belonging to approximately 8.7 million people across three of England’s busiest airports: Manchester, London Stansted, and East Midlands. The incident involved data related to parking lot, lounge and fast-track bookings and in-airport Wi-Fi sign-ups, and the hackers obtained email…
Read More