cybersecurity ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More - The Hacker News cybersecurity Arista patches new VeloCloud Orchestrator zero-day exploited in attacks - BleepingComputer cybersecurity Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes - The Hacker News threat-intel Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year - GBHackers cybersecurity PHP2Shell: 24 hours in, 99.3% of Measurable PHP Instances Are Still Unpatched - OX Security cybersecurity Hackers got a four-day head start on epic PHP2Shell vulnerability - Ars Technica Security cybersecurity Node.js Brotli Decoder Out-of-Bounds Write (RCE) – CVE-2026-111497 - OX Security cybersecurity Hacker Conversations: Corey Thuen and the Evil Bit - SecurityWeek cybersecurity Machine speed attacks require machine speed detection and response - BleepingComputer cybersecurity INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown - The Hacker News threat-intel Cybercriminals Used Claude and Grok to Launch Automated Attacks Against Banks - GBHackers cybersecurity Amazon says PHP2Shell exploitation began 4 days before patches - BleepingComputer threat-intel ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors - Wiz Research threat-intel K0T Hackers Target FortiGate, FortiWeb and Palo Alto GlobalProtect in Credential Theft Campaign - GBHackers cybersecurity Signal Vulnerability Lets Malicious Callers Block Hang-Ups - SecurityWeek

Cybersecurity

Hackers got a four-day head start on epic PHP2Shell vulnerability

Ars Technica Security · 22 Oct 2026

Hackers were already probing the bug before defenders were told it existed.

Continue on Ars Technica Security ↗ ‹ All news Get the newsletter

The summary and image come from Ars Technica Security; the image is shown from their website.