apache

Attackers Exploit Third Arista VCO Zero-Day in Four Months

Worm armed 42 GitHub repos by hiding a payload too big to fail

Microsoft releases emergency .NET patches for critical Brotli flaw

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

Stolen UpdraftCentral keys used to backdoor WordPress sites

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June

CVE-2026-85656 - OS command injection in Amazon log4j-cve-2021-44228-hotpatch

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

Stolen UpdraftCentral keys used to backdoor WordPress sites

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk

Widespread PHP Flaw May Cause Many Site Outages Today

[webapps] WordPress 7.0.2 - Path Travesal

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

Cisco warns of new SD-WAN zero-day exploited in attacks

CVE-2026-87902: Critical Vulnerability in WordPress

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

USN-8847-1: OpenSSL vulnerabilities

CVE-2026-19311- Missing Authorization in OpenSearch Alerting Plugin

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

3 Threat Groups Started Targeting ICS/OT in 2025: Dragos

US Tops Hit List as 396 SharePoint Systems Compromised Globally

US Tops Hit List as 396 SharePoint Systems Compromised Globally

Analyzing Sharepoint Exploits (CVE-2025-53770, CVE-2025-53771), (Wed, Jul 23rd)