A 36-year-old Ukrainian national who acted as a Nefilim and Hive ransomware affiliate and targeted hospitals and government entities has been sentenced to 70 months in prison.
The two flaws are CVE-2026-109618 and CVE-2026-109619 and are said to affect PHP versions 5, 6, 7, and 8.
Threat actors have compromised a credential within the vendor’s infrastructure, allowing them to abuse a client assertion that bypasses traditional user authentication.
Read More Ongoing Microsoft 365 Campaign Abuses ConnectWise App
Nolan casts the invention of the Trojan horse as the ultimate violation of “Zeus’s law,” the idea that you should treat any stranger you encounter with kindness and respect, because they could very well be Zeus in disguise.
Read More The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust
Ivanti warns of active exploitation of CVE-2026-104935, a high-severity Connect Secure flaw.
Read More Ivanti Connect Secure Zero-Day Exploited in Attacks
Two years after the largest healthcare cybersecurity incident in history, the senate has passed The Health Care Cybersecurity and Resiliency Act of 2025.
Read More Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It
Patching is a necessary evil and doing it manually in any decent sized organization was essentially impossible in the pre-AI times and is now pure folly.
