Enterprise
Drupal warns of critical Commerce Core flaw exploited in attacks
Drupal has issued a warning regarding a critical access bypass flaw in its Commerce Core module that is currently being exploited.
Topic
#Vulnerability
Stories tagged by our AI curator.
Enterprise
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Oracle faces multiple critical security issues as attackers exploit a patched E-Business Suite vulnerability and a PeopleSoft zero-day involving three distinct flaws enabling remote code execution.
Enterprise
Critical UEFI firmware flaw leaks early, leaving servers waiting for a fix
A critical UEFI firmware vulnerability in EDK II allows attackers to execute code before the operating system loads, affecting most servers.
Enterprise
A security flaw in these widely used barcode scanners could open up warehouses and stores to cyberattack
A security vulnerability has been discovered in widely used barcode scanners that could expose warehouses and retail stores to cyberattacks.
Enterprise
InfraTrust report warns of exploited flaws in critical network infrastructure
Security report warns of active exploitation of PHP vulnerabilities in firewall and network appliance management interfaces.
Enterprise
Even after PHP2Shell, blast radius matters more than a CVSS score
Security analysis explains how limiting service account access reduces breach damage more than patching alone, using PHP2Shell vulnerability as case study.
Enterprise
Hackers now scanning systems for recently-patched Oracle flaw
Threat actors are actively scanning systems for a recently-disclosed critical vulnerability in Oracle E-Business Suite that remains unpatched on many networks.
Enterprise
CISA warns of hackers now exploiting critical Node2Shell flaw
CISA alerts that hackers are actively exploiting a critical Brotli vulnerability called Node2Shell, also known as Broccoli2Shell and HTTP2Shell.
Enterprise
“The panic hasn’t turned into patching”: What security researchers really think about the PHP2Shell response
Security researchers report that PHP2Shell vulnerability patching is moving too slowly despite critical severity, with 93.6% of systems still exposed five days after disclosure.
Enterprise
Microsoft releases emergency .NET security fixes for Google Brotli bug
Microsoft released emergency security patches for .NET to address a critical buffer overflow vulnerability in Google's Brotli compression library that could allow attackers to corrupt memory.
Enterprise
This abandoned torrent app could have exposed millions of devices to cyberattack
An abandoned torrent application poses a cybersecurity risk that could expose millions of devices to potential attack.
Enterprise
PHP2Shell: No login, no app code, no warning. What next?
Two critical PHP vulnerabilities (PHP2Shell) allow unauthenticated remote code execution on servers. Patches are available but finding all affected PHP installations remains challenging.
AI
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Security researchers used AI tools to discover long-standing vulnerabilities in PHP, which subsequently enabled AI-assisted attacks on the programming language.
Enterprise
PHP2Shell: Security vendors race to contain a critical vulnerability as exploitation attempts spread
Security vendors including Palo Alto Networks, Check Point, and Cloudflare are responding to active exploitation of a critical PHP2Shell vulnerability, with reports of AI-assisted post-exploitation activity and regional attack attempts.
Enterprise
What to know about the AI-detected security bug impacting wide swaths of the internet
The PHP Foundation and FBI warned of significant security vulnerabilities in PHP, the scripting language powering the majority of websites worldwide.
Also covered by 1 other outlet
Enterprise
There's a third PHP2Shell bug, but it won't get an emergency fix
Researchers discovered a third PHP remote code execution vulnerability related to PHP2Shell, but the PHP Foundation will not issue an emergency fix due to its unlikely real-world impact.
Enterprise
PHP is in the foundation of 70% of websites – here’s what it is and why a flaw in the software is a major hacking threat
A PHP vulnerability affecting 70% of websites was discovered using OpenAI's AI model; it leaked before patches were released and hackers began exploitation.
Enterprise
PHP security issues could also threaten your NAS device — but not every vendor is able to patch just yet
PHP security vulnerabilities could affect NAS devices, but some vendors lack ability to patch systems quickly.