Warning Against Vulnerabilities Exploited in Actual Attacks (PHP)
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The affected product is PHP. CVE-2026-109618 is a memory corruption vulnerability that occurs under memory-starved conditions. CVE-2026-109619 is a vulnerability involving a reference to an outdated internal request state. CISA has
Warning Against Vulnerabilities Exploited in Actual Attacks (Adobe Commerce and Magento)
Overview The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. Affected Products and Vulnerabilities CVE-2026-48356. The affected products are Adobe Commerce and Magento. The vulnerability involves unrestricted uploading of dangerous file types. Recommendations Product users should apply mitigations in accordance
Warning Against Vulnerabilities Exploited in Actual Attacks (Collabora Online – Built-in CODE Server)
Overview The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. Affected Users Collabora Online – Built-in CODE Server users. Vulnerability Information CVE-2026-110447. Classified as an OS command injection vulnerability. The announcement states that this vulnerability is currently being exploited in
Warning Against Vulnerabilities Exploited in Actual Attacks (Google Brotli)
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The list includes CVE-2026-111497, which affects Google Brotli. The vulnerability is a return value validation failure. CISA has advised users of this product to update to the latest version. Recommended actions
Ransom & Dark Web Issues Week 2, December 2025
ASEC Blog publishes Ransom & Dark Web Issues Weeks 2, December 2025. Source code from a South Korean camping reservation platform sold on DarkForums LockBit 5.0 targets 25 companies worldwide with ransomware attack Agencies from USA and Europe escalate pressure on pro-Russian hacktivists
