Volt Typhoon uses Silent Train relays for zero-day edge attacks
Black Lotus Labs says four confirmed zero-days hit VeloCloud, Cisco SD-WAN, N-central, and Versa Director.
86
- Mentions · 7d3
- Mentions · 30d19
- All mentions46
- First seenAug 12, 2026
- Last mentioned2d ago
Timeline
46 articles · newest firstNCSC and FCA clarify sharing cyber incidents under market-abuse rules
FCA guidance says sharing incident details with the NCSC can fit normal professional duties under UK market-abuse rules.
36
Critical PHP flaws dubbed PHP2Shell allow unauthenticated code execution
Early exploit attempts followed disclosure, and some sites went offline while owners applied patches.
86
PHP2Shell takes 32 UK government services offline
AWS says the two critical PHP bugs were exploited four days before disclosure; no public-sector compromise is confirmed.
88
PHP2Shell flaws can give unauthenticated control of website servers
Calif and Wiz found the bugs; OpenAI helped PHP develop patches, and the NSA urged taking unpatched systems offline.
90
Critical PHP flaws prompt site shutdowns as exploit attempts surge
watchTowr says both bugs are remote code execution from PHP 5 onward and were rated 9.2 of 10.
90
Amazon says PHP2Shell exploitation began four days before patches
CVE-2026-109618 and CVE-2026-109619 allow remote code execution; Amazon now calls them broadly exploited.
91
PHP2Shell vulnerabilities patched by multiple vendors
PHP releases 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix CVE-2026-109618 and CVE-2026-109619 allowing unauthenticated remote code execution.
80
Critical PHP flaws let unauthenticated attackers run code on web servers
CVE-2026-109618 and CVE-2026-109619 score 9.2; only PHP 8.2 and newer get official patches, and Cloudflare reported early attacks.
90
Dutch NCSC takes its website offline over PHP flaws
A PHP security patch is planned for 16:00 Dutch time, and NCSC expects an advisory within an hour.
58
Critical PHP RCE flaws leaked a day before scheduled patches
CERT-EU told operators to prepare to patch or isolate internet-facing PHP apps; the PHP team rates the flaws CVSS 9.2, not 10.
78
PHP Foundation to patch two critical vulnerabilities in PHP
The October 20, 2026 notice names no CVE identifiers, affected versions, fixed releases, or known exploitation.
64
UK public services told to treat cyber resilience as a board duty
The NCSC handled 204 nationally significant incidents in the year to September 2025, about four a week.
28
UK Legal Aid Agency Data Breach Exposes Personal Records Dating Back to 1978
The UK Legal Aid Agency says its 2025 breach exposed about 250,000 personal records dating back to 1978.
72
Using TLS to protect data
NCSC guidance urges TLS 1.3 with hybrid post-quantum key exchange and retirement of legacy SSL and TLS.
58
Post-quantum updates to our TLS guidance
NCSC says organizations should deploy post-quantum TLS now, completing high-priority migration by 2031.
42
Help the NCSC understand how organisations approach external attack surface risk
UK NCSC is recruiting practitioners on how organisations assess and buy external attack surface management.
22
UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group
Allies warn Integrity Technology Group enables China-backed intrusions, email theft, and related hacking tools.
78
Shadow AI explained: The work shortcut that could leak your company’s secrets
Malwarebytes explains shadow AI risks: unapproved chatbots and agents leak company data, with one in five organizations reporting linked breaches.
25
More than half of UK businesses lack confidence in basic cyber skills
UK government survey finds 57% of businesses (~808,000) lack confidence in at least one basic cybersecurity task, with malware detection the biggest weakness.
28
NCSC Urges UK organizations to Patch for Citrix NetScaler ADC and Gateway 0-Day Vulnerabilities
The UK NCSC urged immediate patching after two critical Citrix NetScaler zero-days were exploited for unauthenticated remote code execution.
88
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
NCSC warns exploited Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 allow remote compromise.
88
One does not simply defend agentically
NCSC UK argues that agentic AI defense is limited by organizational politics and proposes a risk framework for safe automation.
60
The AI hacking apocalypse is not inevitable
Security experts, including former CISA and NCSC leaders, argue AI agent apocalypse claims are overblown and manageable with established cybersecurity controls.
45
Cyber Essentials Has Record Year but Takeup Remains Low
UK Cyber Essentials certifications hit a record 61,430 in the year to June 2026, up 20%, but uptake remains low among 5.7 million SMEs.
28
Adversary simulation: what you need to know
UK NCSC publishes guidance on adversary simulation, comparing full spectrum and assumed breach approaches across prerequisites, testing, and reporting phases.
22
Chosen Brick, Iran’s Surveillance Malware
UK, US, and Dutch agencies warn Iranian CHOSEN BRICK malware targets dissidents and journalists via Telegram, harvesting contacts, emails, and messages since 2025.
70
Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
Iranian state-linked hackers use CHOSEN BRICK Windows malware, spread via Telegram and WhatsApp social engineering, to spy on dissidents and journalists worldwide.
78
Iranian hackers use CHOSEN BRICK data-stealing malware to spy on dissidents and journalists
UK NCSC, FBI and Dutch AIVD warn Iranian state hackers deploy CHOSEN BRICK spyware via WhatsApp and Telegram lures against dissidents and journalists since 2025.
78
Iranian Hackers Use Fake MRI Results to Infect Victims With CHOSEN BRICK Spyware
Iranian state-linked hackers deliver CHOSEN BRICK Windows spyware via fake MRI results to surveil dissidents, activists, and journalists in the UK, US, and Netherlands.
74
NCSC and Allies Warn of Iranian Spyware Campaign
NCSC, FBI and AIVD warn Iranian-backed actors deliver Chosen Brick spyware to regime critics via social engineering; stolen data has surfaced on pro-Iranian leak sites.
76
Hackers Disguise CHOSEN BRICK Malware as AI Apps, Antivirus Software and MRI Results
NCSC, FBI, and AIVD warn Iranian state-linked actors deliver CHOSEN BRICK Windows spyware via fake AI apps, antivirus installers, and MRI-result lures.
72
ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
Hacker News ThreatsDay digest: malicious browser extensions, AI-agent intrusions, NCSC shadow AI warning, M&A wire fraud, and 119,000-domain fake shops.
25
Getting ahead of ‘harvest-now-decrypt-later’: Post-quantum cryptography planning
Opinion piece urges organizations to begin post-quantum cryptography migration now, citing harvest-now-decrypt-later risk and NIST deadlines.
40
NCSC Warns Shadow AI Creates New Security Risks
UK NCSC warns that unapproved AI tools used by 71% of UK employees expose corporate data and create hard-to-detect organizational security risks.
48
The hidden risks of shadow AI
UK NCSC guidance warns shadow AI use by employees risks data exposure, lost data control, and attacker exploitation of vulnerable AI agents.
30
Peers ask why UK cyber bill leaves execs off the personal liability hook
UK peers propose amendments to the Cyber Security and Resilience Bill adding personal executive liability and board-level cyber responsibility; government defends fines-only approach.
45
The G7 tells industry to hurry up and prep for post-quantum encryption
A G7 working group report urges governments and industry to accelerate post-quantum cryptography migration, framing quantum risk as a near-term economic threat.
45
Disruptive cyber activity highlights risk from internet-exposed systems and edge devices
NCSC links disruptive cyber activity to internet-exposed systems and edge devices, urging OT owners to fix avoidable vulnerabilities and improve resilience.
40
Suspected Iran-linked attack knocked UK power plant offline for days
Suspected Iranian hackers knocked a small UK power plant offline for four days in July 2026, with no noticeable impact on the national grid.
58
Related CVEs
by mentions- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-8877182%9.5Unauthenticated RCE in Citrix NetScaler ADC and Gateway
- CVE-2026-8877278%9.5Unauthenticated RCE/DoS in Citrix NetScaler ADC and Gateway
- CVE-2026-887733%9.3HTTP request smuggling in Citrix NetScaler ADC and Gateway
- CVE-2026-88776<1%8.8Memory overflow in Citrix NetScaler ADC and Gateway
- CVE-2026-88775<1%8.8Memory Overflow in Citrix NetScaler ADC and Gateway
- Memory overflow in Citrix NetScaler ADC and Gateway
- Predictable-value flaw in Citrix NetScaler ADC and Gateway
- Feature Policy Bypass in Citrix NetScaler ADC and Gateway
Appears with
- FBIorganization · 8
- Microsoftvendor · 8
- NCSCvendor · 7
- CISAorganization · 7
- Chosen Brickmalware · 6
- Telegramproduct · 5
- PHPvendor · 5
- AIVDorganization · 5
- PHPproduct · 5
- OpenAIorganization · 4
- WhatsAppproduct · 4
- Wizorganization · 4
- Microsoft Defenderproduct · 4
- NSAorganization · 4
- Iranthreat actor · 3
- Califorganization · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.