Posts of last few hours

This week, two critical flaws in the core of PHP forced websites around the world offline. Link11 assesses what is known about the attacks and the role of web application firewalls, explaining why only the update closes the gaps. On October 21, the PHP project released security updates for the two critical vulnerabilities, CVE-2026-109618 and […]

The post PHP2Shell: The First Wave Is Over, but the Real Risk Remains appeared first on Link11.

Hewlett Packard Enterprise has released security patches for multiple vulnerabilities in Aruba Networking wireless software that could let attackers take complete control of affected devices. The flaws affect AOS-8 and AOS-10 deployments across Mobility Conductors, Controllers, Gateways, and access points. Several allow attacks without a valid login, making prompt patching a priority for network administrators. […]

The post HPE Warns Critical Aruba Networking Flaws Could Let Hackers Take Complete Control of Devices appeared first on Cyber Security News.

Capcom has announced plans to notify customers after unauthorized access to its CAPCOM ID service affected 11,774,247 records worldwide. The Japanese game publisher disclosed the incident on October 22, 2026, saying the exposed information included email addresses and details of account activity. Attackers also changed passwords on 196 accounts without permission. Capcom has reset those […]

The post Japanese Game Maker Capcom Has Confirmed – 11,774,247 Customer Records Exposed appeared first on Cyber Security News.

Multiple waves of DDoS attacks disrupted North Korea’s public internet services this week, knocking major state websites offline. Kentik’s internet analysis director Doug Madory linked the outages to sudden traffic floods from Vietnam, the Philippines, Venezuela, and other countries. The traffic began at 02:01 UTC on October 20, making the country’s websites unreachable. The disruption […]

The post Multiple Waves of DDoS Attacks Caused This Week’s Outage in North Korea appeared first on Cyber Security News.

Researchers has demonstrated Node2Shell, a working exploit that lets an attacker run code inside a Node.js application through specially crafted, Brotli-compressed data. The research targets CVE-2026-111497, a high-severity memory flaw in the Brotli decoder bundled with Node.js. The Node.js security advisory, published on October 21, 2026, confirms that the flaw can allow remote code execution […]

The post New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data appeared first on Cyber Security News.

Hackers are actively exploiting a critical SQL injection flaw in VeloCloud Orchestrator (VCO) that allows logged-in users to gain superuser operator access. Arista Networks disclosed the vulnerability on October 22, 2026, warning that successful attacks could compromise the orchestrator, its host, and the data it manages. Arista has already patched hosted deployments, including Dedicated instances. […]

The post Hackers Actively Exploiting Critical VeloCloud Orchestrator Flaw to Gain Superuser Access appeared first on Cyber Security News.

The seller behind StealC has returned with Stadia, a Windows remote access trojan that combines password theft with hidden desktop control. Advertised on October 16, 2026, the malware expands beyond stealing data, allowing criminals to run commands, browse files, manage processes, and load more malicious software. The return follows June’s Operation Endgame disruption. Authorities seized […]

The post StealC Malware Returns as New Stadia RAT to Steal Passwords and Secretly Control Windows PCs appeared first on Cyber Security News.