Lessons from Cybersecurity Black Week
2026-10-29T08:51:31Z•c20046a7d813f5c992ffc97d974bad41efdb7a3c26875dd2208715df0da25036
CVE-2026-109618CVE-2026-109619AI-securityAPTFamousSparrowMATCHBOILMythicRatatoskrPHPSMB-securitySandwormSecure Boot bypassSparroWockyUAC-0099UEFIbackdoorcybersecurity-newsmalwarephishingquishingscamssupply-chain-securitythreat-intelligencevulnerability-disclosure
What happened
ESET WeLiveSecurity feed covering cybersecurity news, vulnerability disclosures, APT activity, malware research, phishing, scams, AI-related threats, supply-chain security, and defensive guidance published from June through October 2026. Notable items include two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619), the MythicRatatoskr backdoor associated with UAC-0099 and Sandworm, UAC-0099’s MATCHBOIL downloader, the SparroWocky backdoor used by FamousSparrow, vulnerable Microsoft-signed UEFI shims enabling Secure Boot bypass, and emerging AI-driven and supply-chain threats.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- eset_welivesecurity
- Record identifier
- c20046a7d813f5c992ffc97d974bad41efdb7a3c26875dd2208715df0da25036
- Enrichment time
- 2026-10-29T08:51:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.