Daily Archives: Nov 2, 2026

Ethan Mercer

Critical PHP2Shell Exploit Code Leaked as Hackers Attempt Botnet Deployment

Public proof-of-concept code for two serious PHP vulnerabilities has been published, and there are reports that attackers have attempted to use the flaws to install botnet malware. Grouped as PHP2Shell, CVE-2026-109618 and CVE-2026-109619 each carry a CVSS score of 9.2 and can enable unauthenticated remote code...
Ethan Mercer

New BlackX Bootkit Lets Hackers Bypass Windows Secure Boot on Fully...

A newly identified UEFI bootkit called BlackX has been used in cyberespionage operations targeting diplomatic organizations in Tajikistan, Uzbekistan and Turkmenistan. The malware attacks Secure Boot, the firmware feature intended to prevent untrusted code from running before Windows starts. Researchers report that the affected machines...
Ethan Mercer

Attackers exploit critical Citrix NetScaler RCE to deploy web shells and...

Critical Citrix NetScaler RCE Exploited to Install Web Shells and Malware body { font-family: Arial, sans-serif; line-height: 1.6; color: #111; padding: 24px; max-width: 900px; margin: auto; } h1, h2 { color: #111; } ...