Vulnerability - it-daily.net - Daily relevant IT news for decision-makers

Honeypot Alert

PHP Vulnerability: Why Patching Alone Isn’t Enough

23. October, 2026 - 12:42

A software update is installed, yet hackers may already have gained access to the system. Security experts recommend reviewing log data going back to a specific date. Here’s why that date matters.

The Race Against Hackers

PHP2Shell: Where Things Stand After the Patch

22. October, 2026 - 16:45

Millions of automated attack attempts, while authorities and website operators take sites offline: Many are now back online. But systems that have missed a critical update remain vulnerable.

Is Half the Web at Risk?

PHP Alert: EU Cybersecurity Agency Urges Websites to Go Offline if Necessary

21. October, 2026 - 16:38

The PHP developers have announced patches for two critical vulnerabilities, due out today. The EU cybersecurity agency CERT-EU is recommending drastic measures: organizations that cannot update immediately should take affected websites offline.

Security Vulnerability

Google Pays $90,000 for RCE Flaw in DevSite

19. October, 2026 - 06:34

An exposed signing key and insecure pickle enabled remote code execution on Google developer pages without login.

Security Vulnerability

GitLab: Critical Flaw in CI/CD Regex Compiler

15. October, 2026 - 05:13

Via a crafted regular expression in a CI/CD configuration, attackers can execute code without authentication. GitLab advises an immediate update.

Sharp Criticism

Linux Developer Quits After Secret Vulnerability Is Reported

17. September, 2026 - 17:35

Andy Nguyen is ending his PS5 Linux project after AI-assisted modders reported a deliberately undisclosed vulnerability to Sony.

Control console without access protection

NASA Software AIT-GUI Allowed Spacecraft Commands Without any Login

01. September, 2026 - 09:49

Security researchers have disclosed a vulnerability chain in AIT-GUI, the browser-based control console for NASA/JPL’s open-source AMMOS Instrument Toolkit.

When Outages Become Normal

Vulnerabilities Are Getting Cheaper, but Downtime Remains Expensive

24. August, 2026 - 07:25

AI is accelerating the search for security vulnerabilities, while attackers are increasingly disabling the very tools designed to stop them. What can still detect an attack when EDR and other security controls have already been taken offline?

Public Exploit Code in Circulation

Cisco Warns of ClamAV Vulnerabilities With Public Exploit Code

15. August, 2026 - 07:07

Cisco is warning about seven ClamAV vulnerabilities affecting its Secure Endpoint Connector products. Exploit code is already publicly available for two of the flaws.

Microsoft Patch Tuesday August 2026

Microsoft Patches Hundreds of Vulnerabilities, Including One Actively Exploited

14. August, 2026 - 06:08

Microsoft has patched hundreds of vulnerabilities as part of its August Patch Tuesday release. One of the flaws was already being exploited as a zero-day by the Lazarus Group.