Ruby Releases Fixes for Regex Bugs Linked to Four GitLab RCE Flaws
Ruby has released versions 4.0.9, 3.4.12 and 3.3.13 to fix three Onigmo regular-expression bugs that GitLab found could enable remote code execution on its servers....
[DEFENSE_NETWORK_REPORT]
Cyber Defense Insights
Threats · Vulnerabilities · Defensive operations
Exaforce reports attackers exfiltrated GitHub data within minutes of token abuse
A newly published Exaforce analysis describes attacks involving dormant GitHub OAuth tokens, fake AI-tool installers and MFA social engineering, with data theft beginning within minutes...
PHP2Shell: Researchers Warn Against Relying on a Shared Configuration Setting
GMO Flatt Security has clarified that disabling PHP’s Session Upload Progress feature is not a complete fix for two critical remote-code-execution vulnerabilities.
CISA says SafePay ransomware has breached at least 600 critical-infrastructure organizations
A joint advisory says SafePay has affected at least 600 organizations across multiple critical-infrastructure sectors since August 2024.
Leaked PHP flaws put servers on alert ahead of scheduled patches
Details of two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, leaked before PHP’s scheduled October 21 security release.
PHP Schedules Critical Security Release for Two CVSS 9.2 Vulnerabilities
PHP’s security team has announced a security release for 21 October to address two critical vulnerabilities, but has not yet published technical details or fixed...
Talos links October’s 1,415 Microsoft flaws to AI-assisted code mining
A new Cisco Talos analysis says AI-assisted vulnerability discovery is helping expose a backlog of weaknesses in older, widely used code, driving Microsoft’s October advisory...
Ahold Delhaize files police report as cyber incident recovery continues
Ahold Delhaize says it has filed a formal report with Dutch police and is restoring websites, apps and e-commerce services after taking systems offline following...
AOMEI says CTO is investigating reports of Backupper update-server tampering
AOMEI told BleepingComputer that its chief technology officer is leading a high-priority investigation after researchers reported that its update and notification infrastructure served malware during...
Siemens confirms active exploitation of Software Center DLL side-loading flaw
Siemens says attackers are actively exploiting CVE-2026-110936 in Siemens Software Center by pairing a legitimate signed executable with malicious DLLs.
Security Incident Disrupts US Bankruptcy Notice System Run by BAE
A security incident affecting BAE Systems’ Bankruptcy Noticing Center has halted bankruptcy notices nationwide for about a week.
Proofpoint agrees to acquire Varonis in $6.3 billion data-security deal
Proofpoint says it will acquire Varonis in an all-cash transaction valued at approximately $6.3 billion, combining Proofpoint’s email and identity-security business with Varonis’ data-visibility and...
Photo credits
- Ruby Releases Fixes for Regex Bugs Linked to Four GitLab RCE Flaws — Btrs · CC BY-SA 4.0 · Converted to JPEG from the source image; displayed with responsive cropping
- Exaforce reports attackers exfiltrated GitHub data within minutes of token abuse — Watty62 · CC BY-SA 4.0 · Converted to JPEG from the source image; displayed with responsive cropping
- PHP2Shell: Researchers Warn Against Relying on a Shared Configuration Setting — Unnerving duck · CC BY-SA 4.0 · Converted to JPEG from the source image; displayed with responsive cropping
- CISA says SafePay ransomware has breached at least 600 critical-infrastructure organizations — DHSgov · Public domain · Converted to JPEG from the source image; displayed with responsive cropping
- Leaked PHP flaws put servers on alert ahead of scheduled patches — Lawrence Systems · CC BY 3.0 · Converted to JPEG from the source image; displayed with responsive cropping
- PHP Schedules Critical Security Release for Two CVSS 9.2 Vulnerabilities — Europäische Kommission - Audiovisueller Dienst, Jennifer Jacquemart, CE - Service audiovisuel, EC - Audiovisual Service, Shimera · CC BY 4.0 · Converted to JPEG from the source image; displayed with responsive cropping
- Talos links October’s 1,415 Microsoft flaws to AI-assisted code mining — Federal Bureau of Investigation · Public domain · Converted to JPEG from the source image; displayed with responsive cropping
- Ahold Delhaize files police report as cyber incident recovery continues — Michielverbeek · CC BY-SA 4.0 · Converted to JPEG from the source image; displayed with responsive cropping
- AOMEI says CTO is investigating reports of Backupper update-server tampering — Carl Lender from Sunrise, USA · CC BY 2.0 · Converted to JPEG from the source image; displayed with responsive cropping
- Siemens confirms active exploitation of Software Center DLL side-loading flaw — Mangan2002 (sv.wikipedia.org) · CC BY 2.5 · Converted to JPEG from the source image; displayed with responsive cropping
- Security Incident Disrupts US Bankruptcy Notice System Run by BAE — Kenneth C. Zirkel · CC BY-SA 4.0 · Converted to JPEG from the source image; displayed with responsive cropping
- Proofpoint agrees to acquire Varonis in $6.3 billion data-security deal — National Institute of Standards and Technology · Public domain · Converted to JPEG from the source image; displayed with responsive cropping
.jpg){kind=link}
.jpg#Licensing){kind=link}
_03.png){kind=link}
.jpg){kind=link}
.jpg){kind=link}
