Security news.
Active exploitation headlines today's brief, with threat actors targeting critical infrastructure using chained PHP2Shell flaws and newly discovered covert botnet frameworks. Security agencies also warn of in-the-wild abuse of Brotli and Oracle E-Business Suite vulnerabilities, while major software vendors roll out urgent patches. IT teams should prioritize internet-facing appliances and apply the latest enterprise security updates immediately.
AI-Assisted Attack Leverages PHP2Shell to Root Servers
Threat actors linked to China combined PHP2Shell vulnerabilities with kernel exploits to gain root access to over 25 servers, breaching a U.S. government-affiliated network.
Volt Typhoon Deploys 'Silent Train' Network for Zero-Day Attacks
Espionage group Volt Typhoon utilized a covert access network composed of compromised IoT, SOHO, and enterprise devices to conduct high-value zero-day exploitation campaigns.
CISA Warns of Active Node2Shell Exploitation
Attackers are actively targeting the critical Brotli vulnerability known as Node2Shell (CVE-2026-111497), prompting CISA to add the flaw to its Known Exploited Vulnerabilities catalog.
Hackers Scan for Critical Oracle E-Business Suite RCE Bug
Attackers have begun scanning for CVE-2026-101767 (CVSS 9.8), a critical improper authentication flaw in Oracle EBS that enables remote code execution days after patches were issued.
CISA Adds VMware ESX and Linux Kernel Bugs to KEV Catalog
CISA issued mandates requiring federal agencies to patch CVE-2026-41709 in VMware ESX and CVE-2026-46300 in the Linux kernel following evidence of active in-the-wild exploitation.
16-Year-Old UEFI Flaw Threatens Network-Booting Servers
A critical vulnerability discovered in EDK II UEFI reference firmware allows attackers to execute arbitrary code before Secure Boot initializes on systems configured for network booting.
Sony ISP Subsidiary Suffers Breach Exposing 2.5M Records
Sony Network Communications confirmed a major data breach compromising personal records belonging to 2.5 million current and former customers.
Chrome and Firefox Release Major Updates Patching Over 200 Flaws
Google and Mozilla released significant browser updates, with Chrome 156 addressing 52 security issues and Firefox 159 delivering 167 patches across various components.