Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw
2026-10-25T14:51:41Z•7fa16fd184f6b0309e547a966150f9070834c9cf6fd481e7655e0afc538a117b
AI-securityCapcomDockerLLMjackingLiteLLMMicrosoft-365PHPPalo-Alto-GlobalProtectPyPIVPN-exploitationaccount-compromisebusiness-email-compromisecloud-securitycredential-theftcritical-vulnerabilitycybersecurity-newsdata-breachsession-cookie-theftsupply-chain-attackvulnerability-management
What happened
Weekly cybersecurity roundup covering critical PHP vulnerabilities, exploitation of a Palo Alto GlobalProtect VPN flaw, Microsoft 365 session-cookie compromise across 79 organizations, a Capcom data breach affecting 11.7 million records, exposed AI model abuse, a LiteLLM supply-chain attack, and related security and policy news. The most urgent items are the actively exploited VPN flaw, critical PHP fixes, stolen-session attacks, and malicious LiteLLM releases.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 7fa16fd184f6b0309e547a966150f9070834c9cf6fd481e7655e0afc538a117b
- Enrichment time
- 2026-10-25T14:51:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.