Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw
ID: b0282518-bc64-5b97-8e2f-e5aa324277d3
STIX ID: report--b0282518-bc64-5b97-8e2f-e5aa324277d3
Feed Name: Help Net Security
**Weekly security roundup:** This bulletin collects last week's top security news: an urgent PHP security release (PHP2Shell CVEs CVE-2026-109618 and CVE-2026-109619) with critical RCEs and immediate patches; active exploit reports including Siemens Software Center DLL side-loading and Palo Alto GlobalProtect bypass used by ransomware groups; multiple supply-chain compromises and malicious package releases (OVHcloud CLI, LiteLLM, AOMEI Backupper); significant breaches and account compromises (Capcom, ConnectWise/Microsoft 365 incidents); plus numerous research findings, tooling releases, and industry trends affecting AI agent permissions and security. It is an overview of many concurrent high-impact issues rather than a single incident report.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.