Security News
PHP2Shell — Critical RCE in PHP (CVE-2026-109618, CVE-2026-109619) (Securelist / Unit 42)
Two critical RCE vulnerabilities in PHP affect web servers globally. Mirai botnet operators are already incorporating PHP2Shell exploits with ASLR bypass techniques documented. No successful compromises confirmed yet — but patch immediately. Unit 42 threat brief · Mirai joins PHP2Shell (SecurityWeek)
Broccoli2Shell — Brotli Decoder RCE (Hacker News)
RCE vulnerability in Brotli decoders affecting Node.js, Python and more. Any application decompressing Brotli data from untrusted sources may be affected. Check dependency chains.
Operation FlashHole — Lazarus Group New Campaign (Securelist)
New Lazarus Group campaign against South Korea following Operation SyncHole. Updated malware chain with old and new implants. Nation-state targeting with geopolitical context.
PAYLOAD Ransomware Weaponises Active Directory GPO (Securelist)
Threat actors obtained domain admin access at a Middle East manufacturer and deployed ransomware estate-wide via malicious Group Policy Objects. Audit GPO change permissions.
DNS Quantum Decryption Protection Accelerating (The Register)
ICANN CTO confirms accelerating work to prepare DNS for post-quantum cryptography ahead of quantum computers challenging conventional encryption.
CISA KEV
No new Known Exploited Vulnerabilities added in the past 48 hours.
Ransomware Activity
41 victims · 11 groups
N0n (11)
⚠️ Asisken Asistencia Médica 🇦🇷 Healthcare [139K client records, 403K medical claims — LIVE]
⚠️ Arthritis Center of Riverside 🇺🇸 Healthcare [Medicare data — LIVE]
TOPLIVO AD 🇧🇬 Energy · Technoleads · Pure Grow Diamonds · Mach Law · Keidel Supply · Andrews Advisory · Texcar · GPIC Projectos 🇵🇹 · Adirondack Networks 🇺🇸
Qilin (8)
White & Case 🇺🇸 Law · ⚠️ Castle Howard Estate 🇬🇧 Hospitality · Ooredoo Myanmar 🇲🇲 · ECOM 🇨🇭 · SLTN Inter Access 🇳🇱 · Heber City UT 🇺🇸 Gov · ETO 🇩🇪 · Hossner-Textil 🇩🇪
Krybit (6) · Emperador (5 — incl. AB InBev 🇧🇪) · The Gentlemen (3 — incl. Conax Technologies 🇳🇴 Defence) · Falcon (2 — incl. ⚠️ Astrana Health 🇺🇸) · Whitearmor (2) · HYFLOCK (⚠️ Aesthetic Dental 🇺🇸) · Anubis · Lamashtu · Panzer