Skip to content
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses

Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. “Cases of compromising IP cameras and DVRs with access to the… 

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

Ravie LakshmananOct 27, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV)… 

Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento

Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento

Ravie LakshmananOct 26, 2026Malware / Web Security An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce… 

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

Swati KhandelwalOct 26, 2026Vulnerability / Web Security PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw… 

This Ugreen charger packs 160W of power and is  off right now

This Ugreen charger packs 160W of power and is $55 off right now

Ugreen Nexode Pro 160W View Deal (function () { document.querySelector(“#sticky-promo-block a”).addEventListener(“click”, function(e) { const debug = document.location.host.search(/lndo.site|go-vip.net/) !== -1; const text = this.closest(“#sticky-promo-block”).querySelector(“p.promo-title”).textContent; const data = { event: “stickyConversionUnitClick”, eventCategory: “Sticky Conversion”, eventAction: “Click”, eventLabel:… 

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

Cybersecurity researchers are calling attention to what they say is a “recurring social engineering pattern” across hundreds of cases in which threat actors use Microsoft Teams’ external chat creation feature to conduct impersonation scams or… 

This2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and More

This2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and More

This2Shell, That2Shell, Everything2Shell. That’s pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in…