Security News
PHP2Shell — Active Exploitation Confirmed
SecurityWeek · BleepingComputer — CVE-2026-109618 and CVE-2026-109619 now confirmed exploited in the wild with 35 shells launched from 2 IPs. Siemens, Schneider Electric, and ABB confirm industrial products are affected. Patch to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35 immediately.
Broccoli2Shell / Node2Shell — Emergency .NET Patches
BleepingComputer · The Register · SecurityWeek — Critical out-of-bounds write in Google's Brotli decoder. OOB patches for .NET 8/9/10/11. Node.js and Python packages also affected.
UNM Health System Diverts Patients — Active Ransomware Incident
SecurityWeek — University of New Mexico Health System forced to divert patients and cancel appointments at 30+ clinics. BYOD ransomware group simultaneously listed University of New Mexico as a victim.
Apple October 2026 Patches — 304 Vulnerabilities
SANS ISC — Includes CVE-2026-86950, an already-exploited CoreGraphics vulnerability. Apply immediately if auto-updates are disabled.
Miasma npm Worm — 42 GitHub Repos Armed
The Register — JFrog researchers found a Miasma-family npm worm secretly armed 42 real repositories from 11 owners since July, using an oversized payload to evade GitHub's scanners.
LiteLLM Supply Chain Attack — Exposed Master Key
The Register · The Record — LiteLLM traced its PyPI supply chain attack to a master key committed to a public GitHub repo in May and never revoked. Tens of thousands of users potentially affected.
University of Copenhagen — 525,000 People Affected
BleepingComputer — Hackers accessed a test environment containing personal data for 525,000 individuals.
Dutch Police Arrest Two Over NFC Relay Attacks
SecurityWeek — Two arrested for NFC relay attacks draining over $400,000 from bank accounts. Victims were called, persuaded to install an app, and scan their card — relaying NFC signals live to fraudsters at payment terminals.
UK — £130M AI Cyber Defence Investment
The Register — UK government announces £130M for AI-powered cyber defences including autonomous agents across critical infrastructure, part of a £600M+ AI spending commitment.
953 Online Stores Infected in Malware Campaign
SecurityWeek — Long-running campaign using small loader code injected into store pages to serve payloads while evading detection.
CISA KEV
No new CISA Known Exploited Vulnerabilities entries confirmed for this date.
NCSC
No new NCSC advisories in the past 48 hours.
Ransomware Activity
41 victims · 13 groups
Qilin (19)
⚠️ Delta Electric Power Association 🇺🇸 Energy · ⚠️ Natural Energy Laboratory of Hawaii Authority 🇺🇸 Energy · ⚠️ Premier Medical Group 🇺🇸 Healthcare · ⚠️ Mountain Rheumatology 🇺🇸 Healthcare · ⚠️ Bangor Wholesale Laminates 🇬🇧 Manufacturing · ⚠️ Power Funding 🇬🇧 Financial Services · Burnaby Schools School District 41 🇨🇦 Education · White & Case 🇺🇸 Law · TeleTronic 🇪🇸 Technology · FIRMENGRUPPE APPL Holding GmbH 🇩🇪 · Taubensee Steel & Wire 🇩🇪 Manufacturing · Zachary Confections 🇺🇸 Retail · Five Star Sheets 🇺🇸 Retail · THOMAS JORDAN P.A. 🇺🇸 Law · Smith Feddeler & Smith 🇺🇸 Law · Miller Stratvert 🇺🇸 Professional Services · Seufert Construction 🇺🇸 Manufacturing · RaceTrakka 🇦🇺 Retail · ETO 🇩🇪
Whitearmor (4)
J.B. Hunt 🇺🇸 Transportation · ⚠️ Partido Liberal 🇧🇷 Political Organisation (79K member records, $5M demand) · LoveSac 🇺🇸 Retail (1.1M order records) · Gamdom Online Gaming
Falcon (3)
⚠️ Astrana Health 🇺🇸 Healthcare (738 GB) · Weitz & Luxenberg 🇺🇸 Law · Beasley Allen 🇺🇸 Law
Emperador (4)
Afflelou 🇫🇷 Retail · Transportes Jimenez & Reyes 🇲🇽 Transport · A-RMS Government/Defence · AyT Computers Technology
Payload (3)
Glückauf-Vermessung GmbH 🇩🇪 · Miletic GmbH 🇩🇪 · Edelstahl-Mechanik GmbH 🇩🇪
BYOD (1)
⚠️ University of New Mexico 🇺🇸 Education (linked to active patient diversion at UNM Health System)
Dragonforce (1)
⚠️ Inside Passage Electric Cooperative 🇺🇸 Energy
Rhysida (1)
⚠️ MISC Group 🇲🇾 Energy
N0n (1)
⚠️ Ingelectus Innovative Electrical Solutions 🇪🇸 Energy
HYFLOCK (1)
⚠️ Aesthetic Dental Designs, P.A. 🇺🇸 Healthcare (Florida)
Panzer (1)
Yodingenierie 🇧🇯 Professional Services
Aurora (1)
Ernesto Malvestiti S.p.A. 🇮🇹 Manufacturing
Doommageddon (1)
Referans Lab Ref-Lab 🇹🇷 Technology