All Articles

kev (3)

This Week in Threats (Oct 22–29, 2026): PHP2Shell, LiteLLM Supply Chain, M365 App Abuse

Posted by Priyanka Aash on October 28, 2026 at 11:26pm in Blog

The exploited vulnerabilities, breaches and campaigns that need a decision this week: PHP2Shell, the LiteLLM supply-chain compromise, Storm-0940 in Microsoft 365, Railway, and eight new KEV entries. Each item links to a full technical analysis.

Exploited This Week: Plex2Shell, Arista VeloCloud, Collabora, SiteGuard, Siemens and GitLab CVSS 10.0

Posted by Priyanka Aash on October 28, 2026 at 11:20pm in Blog

Eight KEV additions in four days plus a CVSS 10.0 GitLab RCE. Patch table with fixed versions and deadlines, root cause per flaw, and why CVSS-only prioritisation would have missed the Plex chain.

PHP2Shell (CVE-2026-109618, CVE-2026-109619): Technical Analysis and CISO Action Plan

Posted by Priyanka Aash on October 28, 2026 at 10:21pm in Blog

Two CVSS 9.2 flaws allow unauthenticated RCE in PHP. CISA KEV deadline Oct 29. Timeline, root cause, exposure figures, affected vendor appliances, hunting indicators and a 24h / this-week / strategic action plan.

Join The Community Discussion

CISO Platform

A global community of 6K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.

Join CISO Community Share Your Knowledge (Post A Blog)

#xg { position:relative;top:120px; } #xn_bar { top:120px; }

Hello, you need to enable JavaScript to use CISO Platform.

Please check your browser settings or contact your system administrator.

kev (3)

This Week in Threats (Oct 22–29, 2026): PHP2Shell, LiteLLM Supply Chain, M365 App Abuse

Exploited This Week: Plex2Shell, Arista VeloCloud, Collabora, SiteGuard, Siemens and GitLab CVSS 10.0

PHP2Shell (CVE-2026-109618, CVE-2026-109619): Technical Analysis and CISO Action Plan

Note: this page contains paid content.

Join The Community Discussion

Read More

Breach Watch Weekly: Legitimate Access Did the Damage (Oct 3-9)

Session Highlights : Field Notes from Black Hat & DEF CON 2026: What Changed in the Attacker Playbook?

Session Highlights : Why Traditional ASM and CTEM Tools Will Fail in the Next 12 Months

Cybercriminals Targeting Cybercriminals

Note: this page contains paid content.

CISO Platform

A global community of 6K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.