PHP2Shell (CVE-2026-109618 & CVE-2026-109619) is a critical unauthenticated RCE in the PHP core. Learn which versions are affected, how to patch, verify and detect exploitation.
In short: CISA has added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after a joint advisory
In short: CVE-2026-104286 is a critical (CVSS 9.8) path traversal vulnerability in Fortinet FortiMail that lets an unauthenticated attacker write
In short: Microsoft Threat Intelligence has documented NeedyMantis, a previously unknown modular backdoor used after attackers already have a foothold,
In short: CVE-2026-61500 is a critical (CVSS 9.3) authentication bypass in Rejetto HTTP File Server (HFS) 3.x. Because the server’s
In short: Google’s Pixel 10 was successfully attacked three times on October 8, 2026, during Pwn2Own Ireland in Cork, even