When confusion reigns, trusted vendors must guide their SMB customers
2026-11-03T08:51:32Z•88aa0860e3b4cf88a7e5bf5659262cab542469968866960bef61ba0552df3390
CVE-2026-109618CVE-2026-109619AI securityAPTAmateraFamousSparrowLinuxMATCHBOILMythicRatatoskrPHP vulnerabilitiesSMB securitySandwormSparroWockyUAC-0099UEFI Secure BootUkrainebackdoorcybersecurity newsinfostealermalwarephishingquishingscamssupply chain securitythreat intelligence
What happened
ESET WeLiveSecurity feed covering October–November 2026 cybersecurity news, including critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), infostealer malware, APT activity, destructive backdoors, phishing and quishing, scams, AI-related threats, supply-chain risks, and UEFI Secure Boot bypass issues. The collection includes both threat research and general security guidance; several topics indicate urgent remediation needs, particularly the PHP flaws and vulnerable signed UEFI shims.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- eset_welivesecurity
- Record identifier
- 88aa0860e3b4cf88a7e5bf5659262cab542469968866960bef61ba0552df3390
- Enrichment time
- 2026-11-03T08:51:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.