TheNde
Security· · 1 min

PHP Vulnerabilities: A Crisis Unfolding.

Today’s cybersecurity landscape is buzzing with urgent updates and major threats. PHP vulnerabilities are causing massive site outages, while ransomware gangs continue to wreak havoc on critical infrastructure. The stakes have never been higher.

In brief
  1. PHP Vulnerabilities: A Crisis Unfolding
  2. Ransomware Threats Escalate
  3. Supply Chain Attacks on the Rise
01 · Security

PHP Vulnerabilities: A Crisis Unfolding

PHP vulnerabilities could cause widespread site outages.
PHP vulnerabilities could cause widespread site outages.

PHP is in the hot seat with two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, potentially affecting 70% of websites globally. These flaws are already being exploited, leading to emergency patches and warnings from cybersecurity authorities. Expect significant disruptions as sites scramble to update.

02 · Security

Ransomware Threats Escalate

SafePay ransomware targets critical infrastructure.
SafePay ransomware targets critical infrastructure.

The SafePay ransomware group has now compromised over 600 critical infrastructure organizations across multiple continents. CISA warns that this group’s activity has escalated since 2024, utilizing various tactics to breach systems. Organizations are urged to tighten their defenses against these persistent threats.

03 · Security

Supply Chain Attacks on the Rise

Supply chain attacks are increasingly common.
Supply chain attacks are increasingly common.

Recently, a hijacked developer account was used to plant a stealer in OVHcloud’s CLI, showcasing the vulnerabilities in software supply chains. Additionally, the LiteLLM tool was compromised in a similar supply chain attack, delivering backdoors to users. These incidents highlight the urgent need for robust security practices in development environments.

04 · Security

Browsers Take Action Against CA Compromise

eMudhra certificates blocked due to security flaws.
eMudhra certificates blocked due to security flaws.

Browsers have blocked eight intermediate certificates from Indian CA eMudhra after it was discovered that their private keys were compromised. This swift action by Mozilla and Google reflects ongoing concerns over certificate security and the potential for fraudulent HTTPS certificates.

Key numbers
600

Critical infrastructure organizations compromised by SafePay ransomware.

Source
70%

Percentage of websites that may be affected by PHP vulnerabilities.

Source
9.2

CVSS score indicating high severity for PHP vulnerabilities.

Source
Top stories
The Hacker News

U.S. Orders DeepSeek Removed From Federal Civilian Systems

The U.S. has banned the use of Chinese AI firm DeepSeek’s products in federal systems over security concerns. This highlights the growing tensions between U.S. and Chinese tech sectors.

The Hacker News

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading

AAPT group Bronze Sandcastle is abusing DLL sideloading techniques to deploy backdoors. These tactics demonstrate the evolving sophistication of state-sponsored threat actors.

Quick links
  1. CISA Orders Federal Agencies to Patch Exploited Plex2Shell FlawsCISA mandates federal agencies to patch vulnerabilities in Plex2Shell and Siemens software. — The Hacker News
  2. Hackers Hid Vasilek Backdoor in VMware ToolsA backdoor was concealed in VMware Tools during a significant healthcare intrusion. — The Hacker News
  3. Children’s Data Stolen After Ransomware AttackData belonging to thousands of children was compromised due to weak password security. — Infosecurity Magazine
  4. Accenture, Dragos, SANS Launch $10M Initiative for Small UtilitiesA $10 million initiative aims to bolster cybersecurity for under-resourced U.S. utilities. — SecurityWeek
  5. Google Chrome Adds ClickFix WarningsChrome introduces ClickFix warnings to prevent malicious command executions. — The Hacker News