October 21, 2026
October 21, 2026 Hash 1136421130c29b7214d534e0e18ed1546 232e1812d96dc3042292c888dae87b54e 360d9fc8f0128b6ca543d7068d6fe5235 URL 1http[:]//login[.]policies[.]governmentlegal[.]org/ 2http[:]//senvd[.]com/ 3http[:]//mfasepm[.]weebly[.]com/ IP 143[.]153[.]14[.]44 2136[.]36[.]189[.]65 3170[.]106[.]64[.]165...
![[Urgent Notice] CVE-2026-109618 / CVE-2026-109619 (CVSS 9.2) PHP2Shell – Critical PHP RCE Vulnerability](https://asec.ahnlab.com/wp-content/uploads/2025/08/securityadviosory.webp)
[Urgent Notice] CVE-2026-109618 / CVE-2026-109619 (CVSS 9.2) PHP2Shell – Critical PHP RCE Vulnerability
Overview Two remote code execution (RCE) vulnerabilities (vulnerabilities that allow a threat actor to execute arbitrary code remotely) have been identified in PHP. These vulnerabilities are identified as CVE-2026-109618 and CVE-2026-109619, and have each been reported with a CVSS score of 9.2 And a severity rating of “Critical.” Impact It
Ransom & Dark Web Issues Week 4, October 2026
ASEC Blog publishes Ransom & Dark Web Issues Week 4, October 2026 The Seven Deadly Sins Claims Data Leaks from Seven Organizations Worldwide HYFLOCK Ransomware Attack on a Saudi ERP Software Company Qilin Ransomware Attack on a Japanese Investment Management Company
Does It Stop When Someone Is Watching? The Suspicious Behavior of a New Type of Infostealer
It is already well known that illegal software and cracked programs can be exploited for malware distribution. Recently, AhnLab identified a new type of information theft malware (Infostealer) disguised as an illegal program. This malware was first detected in mid-August and, after altering its execution method, began spreading widely in
They told me to check my retirement savings balance, but now they’re asking for my password?
You should also be wary of emails urging you to check the status of your retirement pension fund—a topic that might interest office workers. Recently, phishing emails have been identified that use retirement pension notifications as a pretext to steal email account information. Under the pretext of verifying a secure
Adobe Product Security Update Advisory (CVE-2026-81983)
A security update addressing a vulnerability in Adobe products has been released. The affected products are Adobe Acrobat, Acrobat Reader, and Acrobat 2024. The identified vulnerability is CVE-2026-81983, an out-of-bounds write vulnerability (a vulnerability where data is written outside the memory bounds). The affected versions are as follows: Acrobat version
