Microsoft releases emergency .NET security fixes for Google Brotli bug
2026-10-26T19:23:51Z•e06fef57bb0670fe4240a01b6648abd618899a21068860b0ee000f71c3df61b8
AI securityGitLabLiteLLMPHP2ShellPalo Alto NetworksSignalTLSUK governmentactive exploitationcertificate authority compromisecloud securitycredential theftcritical infrastructurephishingransomwareremote code executionsupply-chain compromiseweb application security
What happened
The feed highlights a major active exploitation campaign against PHP2Shell vulnerabilities, including unauthenticated remote code execution, bypasses of existing protections, exploitation before disclosure, millions of attempts, and disruption to UK government services. It also reports other high-impact issues including a max-severity GitLab RCE, LiteLLM supply-chain compromise, compromised certificate-authority private keys enabling website impersonation, Signal microphone/camera exposure, Palo Alto firewall attacks, and a ConnectWise breach affecting thousands of cloud tenants. Several items
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- e06fef57bb0670fe4240a01b6648abd618899a21068860b0ee000f71c3df61b8
- Enrichment time
- 2026-10-26T19:23:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.