Live and recent posts from across the Fediverse tagged #zeroday, aggregated by home.social.
watchTowr confirmed no exploitation in the wild yet and no workaround exists — patching is your only option. Apply the PHP security release immediately; Thursday's timeline is no longer the plan.
Reward: You've received a Rushed Release Medal — it pairs beautifully with your Unplanned Overtime Trophy.
A PHP security release on Oct 21 fixes two CVSS 9.2 flaws, CVE-2026-109618 and CVE-2026-109619, leaked as remote code execution bugs.
#PHP #CVE2026109618 #CVE2026109619 #RemoteCodeExecution #WebSecurity #ZeroDay #PatchNow #CyberSecurity
Pegasus Spyware Targets Serbian University Rector's iPhone Ahead of Election
Serbian University Rector Vladan Đokić's iPhone was hacked with notorious Pegasus spyware just days before a crucial election, sparking concerns of intimidation. The sophisticated attack, which required no interaction from Đokić, was detected by researchers at the University of Toronto's Citizen Lab.
SiteGuard exploited zero-day: CVE-2026-106931 (CVSS4: 8.5 high) SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
English translation:
A vulnerability (CVE-2026-106931) allowing OS command injection has been discovered in the statistics function of SiteGuard Server Edition. Exploitation has already been confirmed.
🚨🐛 SIGINT // Cybersecurity Watch — 2026-10-19
Palo Alto Networks patches an actively exploited PAN-OS zero-day enabling remote code execution—patch firewalls immediately to prevent network compromise.
https://www.securityweek.com/palo-alto-networks-patches-pan-os-zero-day-exploited-for-remote-code-execution/
#CVE #InfoSec #Cybersecurity #ZeroDay
Murmeltiertag oder Cisco-Tag – oder Ivanti?
Vielleicht ist es angebracht, den ikonischen Murmeltiertag zeitgemäß umzubenennen in Cisco-Tag. Denn auch Cisco beschert uns in schöner Regelmäßigkeit und mit kurzer Taktung neue Katastrophen. Heute ist es wieder einmal das Secure E-Mail Gateway SEG (vorige Fälle hier oder hier). Die unter der Nummer CVE‑2026‑76519 geführte Sicherheitslücke im SEG wurde und wird bereits von unbekannten Angreifern ausgenutzt, bevor Cisco einen Flicken veröffentlichen konnte (Zero-Day). Noch mal zum Mitschreiben: Der Zweck des SEG ist es, das dahinter liegende System vor bösartigen E-Mails zu ... Weiterlesen:
https://www.pc-fluesterer.info/wordpress/2026/10/18/murmeltiertag-oder-cisco-tag-oder-ivanti/
#zeroday #backdoor #closedsource #cybercrime #email #exploits #firewall #hersteller #router #sicherheit #UnplugTrump #wissen