InfraTrust report warns of exploited flaws in critical network infrastructure

By Lawrence Abrams · BleepingComputer · Wednesday, 28 October 2026 at 14:00 (6h ago) · Original article ↗

Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as "PHP2Shell" put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at risk. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities…

TechCrunch 26m ago

Security

Discord to let search engines index public server messages

Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. [...]

BleepingComputer 47m ago

Security

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains…

The Hacker News 1h ago

InfraTrust report warns of exploited flaws in critical network infrastructure

More Security & Privacy

Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

Discord to let search engines index public server messages

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns