SparTech Software

Two critical PHP flaws enable unauthenticated remote code execution, with public exploit code and reported attacks prompting urgent patching.

Attackers are probing critical PHP2Shell flaws to deploy Mirai malware as researchers demonstrate an ASLR bypass, intensifying patching pressure on defenders.

Quest Diagnostics says attackers accessed patient records through Quanum Lab Services Manager, while the company investigates the scope and affected data.

INTERPOL says Operation Serengeti III arrested 1,462 suspects, disrupted 10,909 cybercrime networks and recovered more than $105 million.

Google’s updated privacy policy says Gmail, Drive and Photos data shared with Search or Gemini may inform personalized ads when users enable Personal Intelligence.

LiteLLM says attackers used an unrevoked master key and stolen GitHub tokens to publish a malicious v1.107.0 package and Docker images.

PHP warns of an unlikely unpatched RCE path in session uploads, urging administrators to disable upload progress until a routine fix arrives.

ESET says UAC-0099 breached a Ukrainian grain logistics firm before handing access to Sandworm, which used a new Yggdrasil-linked backdoor and wiped data.

Capcom says a breach exposed 11.7 million CAPCOM ID email records and changed 196 passwords, prompting phishing warnings and an ongoing investigation.

PHP2Shell attacks have surged into the millions after AWS found exploitation four days before disclosure, prompting urgent patching and log reviews.