Chrome puts insecure sites behind a permission prompt
2026-10-22T02:51:39Z•c317c8f753c0ade4b856e3d1f6a8dea4dfaedb949fa783fc4dce2238ddf62c4a
CVE-2026-0257CVE-2026-109618CVE-2026-109619AI securityPHPPalo Alto PAN-OSVPNactive exploitationauthentication bypassbrowser securitycertificate authorityinformation-stealing malwareprivacyprivate key exposureransomwareremote code executionsupply chain compromisevulnerability
What happened
Security news covering critical vulnerabilities and active exploitation, including PHP2Shell remote code execution flaws, ransomware exploitation of a Palo Alto GlobalProtect authentication bypass, and compromised OVHcloud CLI releases distributing information-stealing malware. Additional items discuss browser protections against insecure HTTP and tracking, AI-agent security controls, and certificate authority private-key exposure at eMudhra.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- c317c8f753c0ade4b856e3d1f6a8dea4dfaedb949fa783fc4dce2238ddf62c4a
- Enrichment time
- 2026-10-22T02:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.