
Daily Cybersecurity News – October 22, 2026
Hackers exploited PHP2Shell four days before patch · China state group used AI agents in ConnectWise supply chain attack · GitLab critical RCE flaw hits every release since 2012
Read More »Catch up on the last 24 hours with our daily cybersecurity news summary. We monitor the industry to deliver a clean, filtered feed of critical cyber news, including major data breaches, ransomware attacks, and new vulnerabilities.
373 posts · page 2 of 32

Hackers exploited PHP2Shell four days before patch · China state group used AI agents in ConnectWise supply chain attack · GitLab critical RCE flaw hits every release since 2012
Read More »
ConnectWise Supply-Chain Attack Hits Hundreds via API Key · Ransomware Groups Exploit Palo Alto GlobalProtect Since June · Public PoC Released for FortiSIEM RCE Flaw
Read More »
APT28 Breaches NATO Shipbuilder With New Reflective Loader · Rank Math PRO Plugin Backdoored in Supply Chain Attack · PAN-OS CVE-2026-0257 Actively Exploited by Ransomware
Read More »
Plex2Shell Exploit Chain Hits Servers Hours After Disclosure · Fake Web3 Accelerator Spreads Malware via npm Packages · Broadcom Wi-Fi Flaw Lets Nearby Attackers Run Root Code
Read More »
MALFEX npm package imgdecode hides shellcode · Drupal patches two critical RCE flaws · Israeli ad firm aided Candiru zero-click spyware
Read More »
OpenBSD Root Exploit Chains 37-Year-Old Shared-Memory Bug · Chinese APT Abuses BeyondTrust Zero-Day for Espionage · Fake Arch Linux AUR Packages Grant Root via Typos
Read More »
Israeli Firm Pushes Spyware via Online Ads · China's Armory Castle Hits BeyondTrust Zero-Day · PwnEscape Linux Kernel Flaw Leaks Host Memory from VMs
Read More »
Researchers Build $250k Chrome Exploit Using Public OpenAI Model · AI-Found Linux Kernel Flaw Grants Root and VM Escape · Citizen Lab Exposes Zero-Click Spyware via Malicious Ads
Read More »
Attackers Chain Three Ivanti Zero-Days for Root Access · Researchers Build $250K Chrome Exploit With OpenAI Model · AI Agents Breach Systems and Spread Malware
Read More »
npm Trusted Publishing allowed 1500+ package takeovers · Unauthenticated RCE in Bricksforge WordPress under active attack · Qilin and Settra ransomware exploit old Palo Alto VPN flaw
Read More »
Ledger Hardware Implant Linked to $93M Crypto Thefts · AnyDesk Linux Pre-Auth RCE Grants Root Access · Bricksforge WordPress CVE-2024-27956 Under Active RCE Exploitation
Read More »
Chinese Hacker Uses ARTEX AI and Claude on Korean Banks · Anthropic Cuts Internet for Claude After Injection Exploits · P7 DarkSword iOS Kit Steals Crypto Wallets
Read More »