Knowledge
PHP2Shell, the pair of critical PHP vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619, has become one of the most heavily exploited bugs of the year. It was exploited four days before PHP released patches on October 21, added to CISA’s Known Exploited Vulnerabilities catalog, and most
Threat Intelligence
On Friday afternoon, the Federal Aviation Administration (FAA) ordered a nationwide ground stop at every U.S. airport, citing "extraordinary circumstances" and safety concerns. U.S. Transportation Secretary Sean Duffy said a communications problem was affecting all Air Route Traffic Control Centers across the country. "FAA technicians
Zero-Day
Threat actors are exploiting vulnerable Check Point Security Gateways in a campaign that ends with data-wiping malware on VMware ESXi hosts. According to Check Point Research, the attacks began on October 30, 2026, first against Israeli organizations. A single actor ran the whole operation, from initial access to lateral
Threat Intelligence
Microsoft has said there is no indication that the major Microsoft 365 outage that began on November 12 was caused by malicious or cyber activity. The company has publicly expressed regret over the disruption, which affected Outlook, Teams, Exchange Online, and other services for users worldwide. Statement from Microsoft leadership
Vulnerability
Citrix has released security updates fixing 10 critical vulnerabilities across its NetScaler products. Nine of them affect NetScaler ADC and NetScaler Gateway. The tenth is a separate flaw in NetScaler Console that could let unauthenticated attackers bypass access controls. Citrix also fixed many high- and medium-severity bugs, and urges
OpenAI has announced two new AI-powered security products: Daybreak Red Team and Daybreak Defense Factory. They were unveiled at the company’s Cyber at the Frontier event on November 12, 2026. Red Team focuses on penetration testing and vulnerability validation, while Defense Factory investigates security findings and prepares patches.
Threat Intelligence
Microsoft says it is seeing early stabilization and capacity improvements in the Microsoft 365 outage that began on Thursday, November 12. The outage disrupted Outlook, Teams, Exchange Online, SharePoint Online, Microsoft 365 Copilot, and other services for users worldwide. Latest from Microsoft In its latest update on X, Microsoft said
Threat Intelligence
On November 12, 2026, the FBI released a TLP:CLEAR FLASH alert (AC-111226-MS) warning the cryptocurrency/web3 industry and open-source software maintainers about a highly effective North Korean social engineering campaign it calls “FaceStealer.” According to the FBI, the scheme has stolen more than $400 million in
Threat Intelligence
Microsoft 365, Outlook, and Teams went down for thousands of users on Thursday, November 12, 2026, in a major outage that also hit the Microsoft connectors used by OpenAI’s and Anthropic’s AI services. Microsoft first said the problem affected users in the Americas, then confirmed that users worldwide
Threat Intelligence
France has formally attributed a cyberattack that disrupted cold storage at French Blood Establishment (EFS) facilities to Iran’s Islamic Revolutionary Guard Corps (IRGC). The attack targeted a third-party refrigeration equipment provider. It sent storage temperature settings soaring to dangerously high levels, in the latest of a wave of
Malware
N-able says it is investigating a new public disclosure of more vulnerabilities in on-premise N-central servers running version 2026.4.1 HF2. That is the hotfix it released only days ago to fix the Able2Shell vulnerabilities. Public proof-of-concept (PoC) exploits are available, and threat intelligence
Vulnerability
Red Hat has disclosed a critical vulnerability in Red Hat Quay, its enterprise container registry for storing, managing, and distributing container images. The flaw is tracked as CVE-2026-123710 and has a CVSS 3.1 score of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI: