PHP2Shell plus Fragnesia: A dangerous new route from web server to root

The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of a high severity Linux kernel privilege escalation flaw that attackers are chaining with PHP2Shell bugs in the wild. Identified as CVE-2026-46300, it could allow attackers to run malicious code…

بدافزار و آلودگی آسیب‌پذیری و روز صفر نشت داده هوش تهدید برنامه‌نویسی و زبان‌ها پایگاه داده سیستم‌عامل متن‌باز قوانین و مدیریت فناوری
خواندن متن کامل در CSO Online درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CSO Online

Choosing a WAAP in 2026: 3 questions that separate the shortlist

One platform or four Your WAF renewal is coming up. The API team has its own tooling in mind, the fraud team wants a bot product, and someone in networking owns DDoS. Four controls, four consoles, four sets of policies in front of the same applications. That is the situation a Web Application and API Protection platform, or WAAP, exists to replace: one service in front of the application portfolio that handles the WA…

Flare

Beyond the Binance Attack: How Stealer Logs Can Link Corporate Sign-Ins to Developer and Monitoring Tools

By Assaf Morag, Cybersecurity Researcher Can a compromised laptop put far more than one account at risk? Binance’s preliminary report of its latest security incident points to a DevOps engineer’s laptop as a possible entry point to systems involved in $6.3 billion in unauthorized withdrawals. The investigation is still unfolding, but the broader question is […] The post Beyond the Binance Attack: How Stealer Logs Can…