arcticwolf

PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...

Lazarus hackers use post-quantum cryptography for malware delivery

North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware.
SecurityWeek

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

Mirai botnet operators target PHP2Shell and VulnCheck bypasses ASLR, yet no successful PHP2Shell compromise has been ...

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere ...
The Hacker News

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

PHP2Shell attacks remain unsuccessful as researchers demonstrate an ASLR bypass enabling RCE on production-configured PHP ...
Bitcoinist

Plex Server Exploit Chain Used To Install Monero Mining Malware

TL;DR: Attackers are exploiting a chain of Plex Media Server vulnerabilities to install unauthorised cryptocurrency miners ...
HowToGeek on MSN

Your outdated Plex server has a serious vulnerability that could mine crypto for hackers

Your home media library might be working normally, but it is giving hackers more access than you'd expect.