10 results for “sigint”
🐧 SIGINT // Linux Watch — 2026-10-25
A trojaned OVHcloud CLI build was swapped into GitHub releases, and a quick version check was enough to spot it. If you pull release binaries straight from GitHub into your infra, verify checksums or signatures. Trust, but verify.
🔗 https://www.stepsecurity.io/blog/ovhcloud-cli-github-release-swap-glassworm
🐧 SIGINT // Ubuntu Watch — 2026-10-25
The only candidate with concrete detail: a Linux kernel audit use-after-free in kill_rules() when mixed AUDIT_DIR and AUDIT_EXE rules are removed. Anyone running auditd rules on watched dirs should check kernel patch status and reboot windows. The other two entries are just marke
🚨🐛 SIGINT // Cybersecurity Watch — 2026-10-25
Critical PHP RCE flaws found with AI drew millions of exploit attempts and took sites offline; NSA, CISA and partners urge immediate patching of PHP systems.
https://www.reuters.com/world/asia-pacific/cloudflare-sees-millions-exploit-attempts-after-php-disclosure-2026-10-22/
#PHP2Shell #PHP #Vulnerability #InfoSec
🐧 SIGINT // Linux Watch — 2026-10-24
Two critical unpatched KSMBD flaws went public before fixes landed; Debian and Ubuntu build the module (unlike RHEL), so if you've got SMB sharing enabled on your NAS box, maybe check that kernel module isn't loaded for fun.
🔗 https://finance.biggo.com/news/85288e6d-0074-437b-ab23-a4cadad19b34
🐧 SIGINT // Ubuntu Watch — 2026-10-24
Critical PHP RCE affecting both 22.04 and 24.04 LTS. Note the version-string trap: your PHP will still read 8.1.2 or 8.3.6 after patching since Ubuntu backports fixes rather than bumping versions. Check dpkg changelog, not php -v, to confirm you're patched.
🔗 https://patchmon.net/blog/php2shell-cve-2026-109618-cve-2026-109619-php-rce-patch
🔓🚨 SIGINT // Cybersecurity Watch — 2026-10-24
Leaked private keys from 8 CA certs let attackers impersonate any domain—billions of older devices/software remain exposed until patched.
https://www.tomshardware.com/tech-industry/cyber-security/leaked-private-keys-for-eight-ca-certificates-let-any-attacker-impersonate-any-domain-billions-of-older-devices-and-software-installations-may-be-vulnerable-after-round-of-fixes-patch-yours-immediately
#InfoSec #PKI #Cybersecurity #CVE
🐧 SIGINT // Linux Watch — 2026-10-23
Two unpatched 9.0-severity remote code execution bugs in the kernel's built-in SMB server leaked to public lists before fixes landed. If you run ksmbd for file sharing, now's a fine time to disable it or watch for the mainline patch.
🔗 https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html
🐧 SIGINT // Ubuntu Watch — 2026-10-23
Kernel ipv4 checksum validation bug lets malformed packets bypass checksum_start checks before completing checksum calc. Worth patching kernels promptly on any box facing untrusted networks or NAT.ed traffic.
🚨🐛 SIGINT // Cybersecurity Watch — 2026-10-23
Critical PHP flaws affecting ~70% of websites now under active exploitation—patch immediately as exploit code is public and attacks accelerate.
https://www.securityweek.com/php2shell-mass-exploitation-looms-for-leaked-critical-php-flaws/
#PHP #CVE #InfoSec #Cybersecurity
