PHP2Shell: No Full Workaround Exists Before Today's PHP Patch
Two critical PHP flaws, named PHP2Shell and rated 9.2 of 10, will be fixed at 14:00 UTC on October 21. No official workaround exists, and a circulating setting is not enough alone.
Newsroom
Cybersecurity news, advisories and updates
Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
Showing 42
#Patch Management Remove
Public exploit released for AnyDesk Linux pre-authentication flaw giving root access
Researchers have published a working exploit for a pre-authentication remote code execution flaw in AnyDesk for Linux that grants root access. AnyDesk fixed it in version 8.0.3 in June, but described the fix only as a c…
Ahsay releases new fixes for AhsayCBS flaws exploited to drop web shells
Ahsay Backup has issued updates for two AhsayCBS flaws, CVE-2026-105133 and CVE-2026-105134, exploited to deploy web shells and XMRig miners. The source says earlier patches were incomplete.
PHP2Shell exploit attempt seen four days before public disclosure
Amazon's threat intelligence team detected an attempt to exploit the PHP2Shell vulnerabilities on 17 October 2026, ahead of public disclosure. Broad exploitation in the wild has since been reported after patches were re…
Privilege Escalation Vulnerability Identified in Zammad Helpdesk Platform
A privilege management flaw in Zammad allows local users to escalate privileges to root level, potentially enabling full system compromise when chained with another vulnerability.
MikroTik RouterOS Workflow Vulnerability Enables Unauthenticated Session Access
MikroTik RouterOS contains a workflow enforcement flaw allowing unauthenticated clients to open sessions and execute requests, which can be chained with another vulnerability for exploitation.
Threat advisoriesCritical
Critical Input Validation Flaw in Arista VeloCloud Orchestrator Requires Immediate Patching
A critical improper input validation vulnerability in Arista VeloCloud Orchestrator on-premises deployments may allow remote attackers to access privileged functionality and compromise orchestrator confidentiality, inte…
Zyxel GS1900 Series Switches Vulnerable to Stack-Based Buffer Overflow
A stack-based buffer overflow vulnerability in Zyxel GS1900 series switches allows unauthenticated attackers on the local network to execute operating system commands through crafted HTTP requests.
Threat advisoriesCritical
SAP patches maximum-severity OAuth2 credential theft flaw in Cloud SDK for Python
SAP has patched CVE-2026-89111, a maximum-severity OAuth2 SSRF vulnerability in its Cloud SDK for Python that allows remote attackers to steal credentials from multi-tenant BTP applications.
Threat advisoriesCritical
Cisco Secure Email Gateway Under Active Exploit: Critical File-Write Vulnerability
Cisco has confirmed active exploitation of a critical vulnerability in Secure Email Gateway that allows unauthenticated attackers to write files to the operating system via crafted email attachments, potentially leading…
Ahsay AhsayCBS Authentication Bypass Vulnerability Requires Immediate Patching
Ahsay AhsayCBS backup software contains an authentication bypass flaw allowing remote attackers to manipulate API parameters, requiring immediate vendor patches or service discontinuation.
CISA Adds Atlassian Vulnerability to Known Exploited Catalog
CISA has catalogued CVE-2026-21589 affecting multiple Atlassian products due to evidence of active exploitation, urging organizations to prioritize remediation of this file access vulnerability.
Trust
Built around the regulators you answer to
SAMA
Saudi Central BankCSF · BCM · CRFR
NCA
National Cybersecurity AuthorityECC-2:2024 · CSCC · CCC
SDAIA
Saudi Data & AI AuthorityPDPL
CMA
Capital Market AuthorityCSG
CST
Communications, Space & Technology CommissionCRF
14regulatory frameworks
Ready to talk about your compliance?
Tell us where you stand. We will show you the shortest path to what your regulator expects.