SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120
2026-10-25T14:51:37Z•522d3f00c7d823c00e4a2a111a12b0150986214b76462a1a42e0485ca6f3fcad
CVE-2026-110447CVE-2026-114625CVE-2026-115560AI-securityArista VeloCloud OrchestratorCISA-KEVCapcomCollabora OnlinePHPPHP2Shellcode-executioncritical-vulnerabilitydata-breachexploitation-in-the-wildknown-exploited-vulnerabilityremote-code-executionvulnerability
What happened
Security Affairs RSS content covering multiple cybersecurity developments, including actively exploited critical vulnerabilities in Collabora Online and Arista VeloCloud Orchestrator added to CISA's KEV catalog, PHP code-execution flaws including PHP2Shell, a Capcom data breach exposing approximately 11.7 million email addresses, and an AI training security incident. The most urgent items are the KEV-listed vulnerabilities and PHP exploitation reports.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 522d3f00c7d823c00e4a2a111a12b0150986214b76462a1a42e0485ca6f3fcad
- Enrichment time
- 2026-10-25T14:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.