4 results for “threatnoir”
⚠️ CRITICAL: Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products
Palo Alto Networks confirmed two critical PHP RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619) in PAN-OS and multiple network products. Public proof-of-concept exploits exist for the underlying PHP2Shell flaws, enabling unauthenticated remote code execution. All Palo Alto management interf…
🤖 AI generated summary
⚠️ CRITICAL: BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
BlackX UEFI bootkit is actively targeting diplomatic entities in Central Asia and bypassing Secure Boot on fully patched Windows systems lacking firmware revocations. APT41 is suspected as the threat actor. Compromised systems achieve pre-OS persistence with kernel-level access, enabling data exfil…
🤖 AI generated summary
⚠️ CRITICAL: Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
Chinese threat actor Storm-0940 exploited compromised ConnectWise credentials to breach over 2,250 Microsoft 365 tenants using ARTEX, an open-source AI pen-testing tool. Attackers achieved privileged access and persistent backdoors in multiple organizations within hours. If your org uses ConnectWis…
🤖 AI generated summary
2026-W43 — Weekly Threat Roundup
🐚 PHP2Shell dominated the week: CVEs exploited before disclosure, millions of attempts, no confirmed compromises yet, but a third unpatched RCE arrived days later.
🤖 AI-accelerated attacks went mainstream: Storm-0940 used the Artex framework to compromise 300+ Entra tenants; ransomware affiliates…
https://threatnoir.com/weekly/2026-w43
#infosec #cybersecurity #threatintel
🤖 AI generated summary