Warning Against Vulnerabilities Exploited in Actual Attacks (Collabora Online – Built-in CODE Server)
Overview The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. Affected Users Collabora Online – Built-in CODE Server users. Vulnerability Information CVE-2026-110447. Classified as an OS command injection vulnerability. The announcement states that this vulnerability is currently being exploited in
Warning Against Vulnerabilities Exploited in Actual Attacks (Google Brotli)
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The list includes CVE-2026-111497, which affects Google Brotli. The vulnerability is a return value validation failure. CISA has advised users of this product to update to the latest version. Recommended actions
Warning Against Vulnerabilities Exploited in Actual Attacks (PHP)
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The affected product is PHP. CVE-2026-109618 is a memory corruption vulnerability that occurs under memory-starved conditions. CVE-2026-109619 is a vulnerability involving a reference to an outdated internal request state. CISA has
Warning Against Vulnerabilities Exploited in Actual Attacks (Adobe Commerce and Magento)
Overview The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. Affected Products and Vulnerabilities CVE-2026-48356. The affected products are Adobe Commerce and Magento. The vulnerability involves unrestricted uploading of dangerous file types. Recommendations Product users should apply mitigations in accordance
Ransom & Dark Web Issues Week 5, October 2026
ASEC Blog를 통해 한 주간의 ‘Ransom & Dark Web Issues’ – 2026년 10월 5주차를 게시한다. n0n Data Extortion Attack on a South Korean IT Services and Systems Integration Company Access to a South Korean Steel Pipe Manufacturer’s Production System Reported The Gentlemen Ransomware Attack on
September 2026 Infostealer Trend Report
Content This Infostealer Trend Report summarizes the distribution channels, number of malware samples, number of detections, and information on companies targeted by new Infostealers (malware designed to steal information) collected during the month of September 2026. The data was compiled based on detection logs from AhnLab SEcurity intelligence Center (ASEC)
