PHP — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical Joomla JCE Vulnerability Under Active Exploitation

  A critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw affects JCE versions below 2.9.99.6 and…

  33 articles · Updated June 17, 2026
• Critical NGINX Vulnerability CVE-2026-42945 Exposes Millions to RCE and DoS Attacks

  A critical vulnerability, CVE-2026-42945, has been discovered in the NGINX web server's ngx_http_rewrite_module, allowing unauthenticated attackers to execute remote code or crash servers. This heap-based buffer…

  51 articles · Updated May 13, 2026
• Critical RCE Vulnerability in Blocksy Companion Pro Plugin Discovered

  A critical vulnerability, CVE-2026-58480, has been identified in the Blocksy Companion Pro plugin for WordPress versions prior to 2.1.47. This unauthenticated arbitrary file upload vulnerability allows attackers to…

  2 articles · Updated July 9, 2026
• Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

  On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…

  67 articles · Updated June 18, 2026
• Belarusian Hackers Target Yury Hubarevich with Sophisticated Phishing Attack

  On May 29, 2026, Yury Hubarevich, a prominent Belarusian politician, was targeted in a phishing attack linked to the Belarusian espionage group UNC1151. The attack involved an email disguised as a Google notification,…

  11 articles · Updated June 5, 2026
• Critical XSS and Memory Vulnerabilities in Oracle PHP Releases

  Oracle has released important security updates for PHP versions 7.4 and 8.0, addressing multiple vulnerabilities including critical cross-site scripting (XSS) flaws and memory management issues. The updates fix…

  2 articles · Updated July 6, 2026
• July 2026 Security Update: Record CVEs and Critical Vulnerabilities

  In July 2026, Adobe and Microsoft released significant security updates addressing numerous vulnerabilities. Adobe issued 12 bulletins for 88 unique CVEs, with a focus on ColdFusion and Commerce patches, including a…

  3 articles · Updated July 14, 2026
• SQL Injection Vulnerabilities Discovered in Gate Pass Management System and Yot CMS

  Two critical SQL injection vulnerabilities have been identified in Gate Pass Management System 2.1 and Yot CMS 3.3.1, both published on 2026-05-30. CVE-2018-25424 allows unauthenticated attackers to bypass…

  7 articles · Updated May 30, 2026
• Anonymous Researcher Publishes Zero-Day Exploits for Major Software Projects

  An anonymous researcher known as Bikini has released exploit code for over a dozen zero-day vulnerabilities affecting 15 popular open-source projects, including the Linux kernel and Libssh2. The exploits were disclosed…

  4 articles · Updated July 1, 2026
• Critical PHP Vulnerabilities Enable DoS Attacks on Web Applications

  Two critical vulnerabilities in PHP, CVE-2026-12184 and CVE-2026-14355, have been disclosed, posing significant risks to web applications. CVE-2026-12184 allows attackers to trigger denial-of-service (DoS) conditions by…

  4 articles · Updated July 6, 2026

Recent Intelligence Reports

• The AI code vulnerabilities that grow with your app — Feeds2.Feedburner · July 23, 2026
• CVE-2026-64880 | Tenable® — Tenable · July 21, 2026
• CVE-2026-16327: HIGH (CVSS 7.3) — Echelongraph · July 21, 2026
• [R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0 — Tenable · July 20, 2026
• Mageia PHP Critical Memory Corruption Vulnerability CVE-2026 — Linuxsecurity · July 20, 2026
• WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th) — Isc.Sans.Edu · July 20, 2026
• Okta explains — sec.okta.com · July 19, 2026
• HollowByte DDoS flaw bloats OpenSSL server memory with 11 — Bleepingcomputer · July 18, 2026

Related Entities