{
  "updated_utc": "2026-10-28 20:32 UTC",
  "updated_iso": "2026-10-28T20:32:52Z",
  "content_hash": "f27261ac449a83a48b0c9d3e954e8f43527fd6fd07f1bf9d5db9d32375cf7bb8",
  "count": 14,
  "feeds_monitored": [
    "The Hacker News",
    "CISA Advisories",
    "UK NCSC Advisories",
    "WordPress Security",
    "BleepingComputer",
    "PHP Official Releases"
  ],
  "self_posture": {
    "domain": "faultypacket.co.uk",
    "target_grade": "A+ (100/100)",
    "headers_locked": true,
    "mta_sts_policy_enforced": true,
    "live_dns": {
      "spf": "v=spf1 include:_spf.mx.cloudflare.net include:_spf.google.com -all",
      "dmarc": "v=DMARC1; p=reject; adkim=s; aspf=s; fo=1; rua=mailto:security@faultypacket.co.uk",
      "mta_sts": "v=STSv1; id=2026102701",
      "tls_rpt": "v=TLSRPTv1; rua=mailto:security@faultypacket.co.uk",
      "caa_count": 10
    },
    "actions_taken": []
  },
  "by_pillar": {
    "m365_ce33": {
      "source": "The Hacker News",
      "title": "Google to Allow One-Tap Android App Installs From Approved\u2026",
      "url": "https://thehackernews.com/2026/10/google-to-allow-one-tap-android-app.html",
      "published": "Wed, 28 Oct 2026 22:38:09 +0530",
      "summary": "Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full ",
      "cves": [],
      "verification_badge": "VERIFIED 6-FEED SECURITY RADAR",
      "pillar_id": "m365_ce33",
      "gig_key": "ce33",
      "pillar_name": "Entra ID / M365 & Cyber Essentials v3.3",
      "pack_label": "\u00a329 Cyber Essentials v3.3 ('Danzell') & Entra ID Pack",
      "pack_price": "\u00a329",
      "fix_summary": "Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock external mail forwarding.",
      "tool_url": "https://faultypacket.co.uk/cyber-essentials-v3-3-danzell-readiness.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=ce33",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/run-a-cyber-essentials-v3-3-and-entra-id-pre-audit-with-evidence-pack",
      "x_intent_url": "https://x.com/intent/post?text=Google%20to%20Allow%20One-Tap%20Android%20App%20Installs%20From%20Approved%20Third-Party%20Stores%20Outside%20U.S.%20%28The%20Hacker%20News%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Enforce%20Conditional%20Access%20phish-resistant%20MFA%2C%20revoke%20stale%20OAuth%20consent%20grants%2C%20and%20lock%20exter",
      "x_post_copy": "Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. (The Hacker News)\n\nQuick check worth running today: Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock exter"
    },
    "php_wp_web": {
      "source": "GitHub Security Advisories",
      "title": "CVE-2026-108360: [phpoffice/phpspreadsheet] PhpSpreadsheet:\u2026",
      "url": "https://github.com/advisories/GHSA-2phh-27fw-q4gc",
      "published": "2026-10-27T15:38:39Z",
      "summary": "## Summary PhpSpreadsheet's `Worksheet\\Drawing::setPath()` validates an external-image URL against an operator-supplied `isWhitelisted` callback **once**, on the initial URL only, then fetches it with `file_get_contents()` using a stream co",
      "cves": [
        "CVE-2026-108360"
      ],
      "verification_badge": "GITHUB GHSA-2phh-27fw-q4gc + CVE-2026-108360 VERIFIED",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=CVE-2026-108360%3A%20%5Bphpoffice/phpspreadsheet%5D%20PhpSpreadsheet%3A%20SSRF%20whitelist%20bypass%20via%20unre-vali...%20%28GitHub%20Security%20Advisories%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20pr",
      "x_post_copy": "CVE-2026-108360: [phpoffice/phpspreadsheet] PhpSpreadsheet: SSRF whitelist bypass via unre-vali... (GitHub Security Advisories)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec pr"
    },
    "dmarc_email": {
      "source": "The Hacker News",
      "title": "Wazuh and AI for Enhanced SOC Workflows",
      "url": "https://thehackernews.com/2026/10/wazuh-and-ai-for-enhanced-soc-workflows.html",
      "published": "Wed, 28 Oct 2026 17:00:00 +0530",
      "summary": "Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, a",
      "cves": [],
      "verification_badge": "VERIFIED 6-FEED SECURITY RADAR",
      "pillar_id": "dmarc_email",
      "gig_key": "dmarc",
      "pillar_name": "DMARC, SPF & MTA-STS Email Authentication",
      "pack_label": "\u00a35 Starter Quick-Fix / \u00a324 DMARC, SPF & MTA-STS Pack",
      "pack_price": "\u00a35 / \u00a324",
      "fix_summary": "Enforce DMARC p=reject with explicit sp=reject subdomain lock, flatten SPF under the 10-lookup RFC 7208 ceiling with -all, and publish MTA-STS TLS enforcement.",
      "tool_url": "https://faultypacket.co.uk/dmarc-spf-mta-sts-remediation-guide.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=dmarc24",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-domain-dmarc-spf-mta-sts-and-deliver-a-complete-dns-fix-pack",
      "x_intent_url": "https://x.com/intent/post?text=Wazuh%20and%20AI%20for%20Enhanced%20SOC%20Workflows%20%28The%20Hacker%20News%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Enforce%20DMARC%20p%3Dreject%20with%20explicit%20sp%3Dreject%20subdomain%20lock%2C%20flatten%20SPF%20under%20the%2010-lookup%20RFC%207208%20ceilin",
      "x_post_copy": "Wazuh and AI for Enhanced SOC Workflows (The Hacker News)\n\nQuick check worth running today: Enforce DMARC p=reject with explicit sp=reject subdomain lock, flatten SPF under the 10-lookup RFC 7208 ceilin"
    },
    "nis2_dora": {
      "source": "The Hacker News",
      "title": "CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets",
      "url": "https://thehackernews.com/2026/10/cyberstrikeai-uses-44-ai-agents-to.html",
      "published": "Tue, 27 Oct 2026 23:56:46 +0530",
      "summary": "Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed se",
      "cves": [],
      "verification_badge": "VERIFIED 6-FEED SECURITY RADAR",
      "pillar_id": "nis2_dora",
      "gig_key": "nis2",
      "pillar_name": "NIS2 & DORA Supply-Chain Compliance",
      "pack_label": "\u00a319 NIS2 & DORA Supplier Bulk Auditor Pack",
      "pack_price": "\u00a319",
      "fix_summary": "Run automated DNS/TLS posture sweeps across supplier domains and generate timestamped Article 21 / DORA register evidence.",
      "tool_url": "https://faultypacket.co.uk/nis2-dora-supplier-posture-auditor.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=nis2",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-up-to-250-supplier-domains-for-nis2-dora-and-iso-27001-compliance",
      "x_intent_url": "https://x.com/intent/post?text=CyberStrikeAI%20Uses%2044%20AI%20Agents%20to%20Automate%20Hacking%20Operations%20Against%20Japan%20Targets%20%28The%20Hacker%20News%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Enforce%20Conditional%20Access%20phish-resistant%20MFA%2C%20revoke%20stale%20OAuth%20consent%20grants%2C%20and%20lock%20external%20ma",
      "x_post_copy": "CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets (The Hacker News)\n\nQuick check worth running today: Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock external ma"
    }
  },
  "items": [
    {
      "source": "GitHub Security Advisories",
      "title": "CVE-2026-108360: [phpoffice/phpspreadsheet] PhpSpreadsheet:\u2026",
      "url": "https://github.com/advisories/GHSA-2phh-27fw-q4gc",
      "published": "2026-10-27T15:38:39Z",
      "summary": "## Summary PhpSpreadsheet's `Worksheet\\Drawing::setPath()` validates an external-image URL against an operator-supplied `isWhitelisted` callback **once**, on the initial URL only, then fetches it with `file_get_contents()` using a stream co",
      "cves": [
        "CVE-2026-108360"
      ],
      "verification_badge": "GITHUB GHSA-2phh-27fw-q4gc + CVE-2026-108360 VERIFIED",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=CVE-2026-108360%3A%20%5Bphpoffice/phpspreadsheet%5D%20PhpSpreadsheet%3A%20SSRF%20whitelist%20bypass%20via%20unre-vali...%20%28GitHub%20Security%20Advisories%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20pr",
      "x_post_copy": "CVE-2026-108360: [phpoffice/phpspreadsheet] PhpSpreadsheet: SSRF whitelist bypass via unre-vali... (GitHub Security Advisories)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec pr"
    },
    {
      "source": "GitHub Security Advisories",
      "title": "CVE-2026-108082: [symfony/http-foundation] Symfony: ReDoS in\u2026",
      "url": "https://github.com/advisories/GHSA-r925-mgvr-h9cc",
      "published": "2026-10-27T19:01:39Z",
      "summary": "### Description `HeaderUtils::split()` parsed header values with a pattern whose token alternative also matched whitespace, followed by a `(?<!\\s)` lookbehind. A run of whitespace placed before a separator could be divided among the iterati",
      "cves": [
        "CVE-2026-108082"
      ],
      "verification_badge": "GITHUB GHSA-r925-mgvr-h9cc + CVE-2026-108082 VERIFIED",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=CVE-2026-108082%3A%20%5Bsymfony/http-foundation%5D%20Symfony%3A%20ReDoS%20in%20HeaderUtils%3A%3Asplit%28%29%20Reachable%20Thr...%20%28GitHub%20Security%20Advisories%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20pr",
      "x_post_copy": "CVE-2026-108082: [symfony/http-foundation] Symfony: ReDoS in HeaderUtils::split() Reachable Thr... (GitHub Security Advisories)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec pr"
    },
    {
      "source": "GitHub Security Advisories",
      "title": "CVE-2026-109413: [symfony/symfony] Symfony: Unbounded Recursion\u2026",
      "url": "https://github.com/advisories/GHSA-2v3c-qxhr-7vpv",
      "published": "2026-10-27T19:01:50Z",
      "summary": "### Description `Yaml\\Parser::lexInlineStructure()` recursed through `lexInlineMapping()` and `lexInlineSequence()` for every `{` and `[` of an inline collection, without entering the nesting level that the rest of the parser bounds with `m",
      "cves": [
        "CVE-2026-109413"
      ],
      "verification_badge": "GITHUB GHSA-2v3c-qxhr-7vpv + CVE-2026-109413 VERIFIED",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=CVE-2026-109413%3A%20%5Bsymfony/symfony%5D%20Symfony%3A%20Unbounded%20Recursion%20in%20the%20YAML%20Inline%20Lexer%20Lets%20a...%20%28GitHub%20Security%20Advisories%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20pr",
      "x_post_copy": "CVE-2026-109413: [symfony/symfony] Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a... (GitHub Security Advisories)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec pr"
    },
    {
      "source": "GitHub Security Advisories",
      "title": "CVE-2026-116675: [tinymce] TinyMCE Cross-Site Scripting (XSS)\u2026",
      "url": "https://github.com/advisories/GHSA-mf2p-h6hf-fcwm",
      "published": "2026-10-27T21:07:12Z",
      "summary": "### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via elements crafted through the data-mce-object attribute, which are created and executed before sanitization. Impacts users of TinyMCE with th",
      "cves": [
        "CVE-2026-116675"
      ],
      "verification_badge": "GITHUB GHSA-mf2p-h6hf-fcwm + CVE-2026-116675 VERIFIED",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=CVE-2026-116675%3A%20%5Btinymce%5D%20TinyMCE%20Cross-Site%20Scripting%20%28XSS%29%20vulnerability%20using%20media%20plugin%20...%20%28GitHub%20Security%20Advisories%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20pr",
      "x_post_copy": "CVE-2026-116675: [tinymce] TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin ... (GitHub Security Advisories)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec pr"
    },
    {
      "source": "The Hacker News",
      "title": "Volt Typhoon Used Covert Silent Train Network in Four Zero-Day\u2026",
      "url": "https://thehackernews.com/2026/10/volt-typhoon-used-covert-silent-train.html",
      "published": "Wed, 28 Oct 2026 23:38:33 +0530",
      "summary": "The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. \"First identified in late 2023, Silent Train u",
      "cves": [],
      "verification_badge": "VERIFIED 6-FEED SECURITY RADAR",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=Volt%20Typhoon%20Used%20Covert%20Silent%20Train%20Network%20in%20Four%20Zero-Day%20Exploitation%20Campaigns%20%28The%20Hacker%20News%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20primitives%2C%20and%20deploy%20str",
      "x_post_copy": "Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns (The Hacker News)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy str"
    },
    {
      "source": "The Hacker News",
      "title": "Google to Allow One-Tap Android App Installs From Approved\u2026",
      "url": "https://thehackernews.com/2026/10/google-to-allow-one-tap-android-app.html",
      "published": "Wed, 28 Oct 2026 22:38:09 +0530",
      "summary": "Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google&nbsp;its full ",
      "cves": [],
      "verification_badge": "VERIFIED 6-FEED SECURITY RADAR",
      "pillar_id": "m365_ce33",
      "gig_key": "ce33",
      "pillar_name": "Entra ID / M365 & Cyber Essentials v3.3",
      "pack_label": "\u00a329 Cyber Essentials v3.3 ('Danzell') & Entra ID Pack",
      "pack_price": "\u00a329",
      "fix_summary": "Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock external mail forwarding.",
      "tool_url": "https://faultypacket.co.uk/cyber-essentials-v3-3-danzell-readiness.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=ce33",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/run-a-cyber-essentials-v3-3-and-entra-id-pre-audit-with-evidence-pack",
      "x_intent_url": "https://x.com/intent/post?text=Google%20to%20Allow%20One-Tap%20Android%20App%20Installs%20From%20Approved%20Third-Party%20Stores%20Outside%20U.S.%20%28The%20Hacker%20News%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Enforce%20Conditional%20Access%20phish-resistant%20MFA%2C%20revoke%20stale%20OAuth%20consent%20grants%2C%20and%20lock%20exter",
      "x_post_copy": "Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. (The Hacker News)\n\nQuick check worth running today: Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock exter"
    },
    {
      "source": "The Hacker News",
      "title": "Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge\u2026",
      "url": "https://thehackernews.com/2026/10/researcher-reveals-how-logic-bugs-alone.html",
      "published": "Wed, 28 Oct 2026 21:53:34 +0530",
      "summary": "A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai of DEVCORE published the full method on October 28, five mon",
      "cves": [],
      "verification_badge": "VERIFIED 6-FEED SECURITY RADAR",
      "pillar_id": "m365_ce33",
      "gig_key": "ce33",
      "pillar_name": "Entra ID / M365 & Cyber Essentials v3.3",
      "pack_label": "\u00a329 Cyber Essentials v3.3 ('Danzell') & Entra ID Pack",
      "pack_price": "\u00a329",
      "fix_summary": "Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock external mail forwarding.",
      "tool_url": "https://faultypacket.co.uk/cyber-essentials-v3-3-danzell-readiness.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=ce33",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/run-a-cyber-essentials-v3-3-and-entra-id-pre-audit-with-evidence-pack",
      "x_intent_url": "https://x.com/intent/post?text=Researcher%20Reveals%20How%20Logic%20Bugs%20Alone%20Cracked%20Microsoft%20Edge%20in%20%24175%2C000%20Pwn2Own%20Win%20%28The%20Hacker%20News%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Enforce%20Conditional%20Access%20phish-resistant%20MFA%2C%20revoke%20stale%20OAuth%20consent%20grants%2C%20and%20lock%20external%20",
      "x_post_copy": "Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win (The Hacker News)\n\nQuick check worth running today: Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock external "
    },
    {
      "source": "The Hacker News",
      "title": "PHP2Shell Attack Roots 25 Servers, Breaches U.S.\u2026",
      "url": "https://thehackernews.com/2026/10/php2shell-attack-roots-25-servers.html",
      "published": "Wed, 28 Oct 2026 21:32:45 +0530",
      "summary": "Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity",
      "cves": [],
      "verification_badge": "VERIFIED 6-FEED SECURITY RADAR",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=PHP2Shell%20Attack%20Roots%2025%20Servers%2C%20Breaches%20U.S.%20Government-Affiliated%20Network%20%28The%20Hacker%20News%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20primitives%2C%20and%20deploy%20strict%20HST",
      "x_post_copy": "PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network (The Hacker News)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HST"
    },
    {
      "source": "The Hacker News",
      "title": "Hackers Target Critical Oracle E-Business Suite RCE Flaw Days\u2026",
      "url": "https://thehackernews.com/2026/10/hackers-target-critical-oracle-e.html",
      "published": "Wed, 28 Oct 2026 18:18:03 +0530",
      "summary": "Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) , a case of improper authe",
      "cves": [
        "CVE-2026-101767"
      ],
      "verification_badge": "CVE TRACKED (CVE-2026-101767)",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=Hackers%20Target%20Critical%20Oracle%20E-Business%20Suite%20RCE%20Flaw%20Days%20After%20Security%20Patch%20%28The%20Hacker%20News%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20primitives%2C%20and%20deploy%20strict",
      "x_post_copy": "Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch (The Hacker News)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict"
    },
    {
      "source": "CISA Advisories",
      "title": "CISA Adds Two Known Exploited Vulnerabilities to Catalog",
      "url": "https://www.cisa.gov/news-events/alerts/2026/10/28/cisa-adds-two-known-exploited-vulnerabilities-catalog",
      "published": "Wed, 28 Oct 26 12:00:00 +0000",
      "summary": "CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux Kernel Missing Initialization of ",
      "cves": [
        "CVE-2026-41709",
        "CVE-2026-46300"
      ],
      "verification_badge": "GOV/VENDOR + CVE-2026-41709 VERIFIED",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=CISA%20Adds%20Two%20Known%20Exploited%20Vulnerabilities%20to%20Catalog%20%28CISA%20Advisories%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20primitives%2C%20and%20deploy%20strict%20HSTS",
      "x_post_copy": "CISA Adds Two Known Exploited Vulnerabilities to Catalog (CISA Advisories)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS"
    },
    {
      "source": "CISA Advisories",
      "title": "Mitsubishi Electric GENESIS, ICONICS Suite & MobileHMI Advisory",
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-02",
      "published": "Tue, 27 Oct 26 12:00:00 +0000",
      "summary": "View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations (CVE-2026-16438), resulting in info",
      "cves": [
        "CVE-2023-4863",
        "CVE-2026-16436",
        "CVE-2026-16437",
        "CVE-2026-16438"
      ],
      "verification_badge": "GOV/VENDOR + CVE-2023-4863 VERIFIED",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=Mitsubishi%20Electric%20GENESIS%2C%20GENESIS64%2C%20ICONICS%20Suite%2C%20Hyper%20Historian%2C%20AnalytiX%2C%20MobileHMI%2C%20Io...%20%28CISA%20Advisories%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20primitives%2C%20a",
      "x_post_copy": "Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, Io... (CISA Advisories)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, a"
    },
    {
      "source": "CISA Advisories",
      "title": "EPICS Base",
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01",
      "published": "Tue, 27 Oct 26 12:00:00 +0000",
      "summary": "View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code. The following versions of EPICS Base are a",
      "cves": [],
      "verification_badge": "GOV / OFFICIAL VENDOR VERIFIED",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=EPICS%20Base%20%28CISA%20Advisories%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20primitives%2C%20and%20deploy%20strict%20HSTS",
      "x_post_copy": "EPICS Base (CISA Advisories)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS"
    },
    {
      "source": "UK NCSC Advisories",
      "title": "From industry concern to practical action: the value of working\u2026",
      "url": "https://www.ncsc.gov.uk/blogs/industry-concern-practical-action-value-working-regulators",
      "published": "Tue, 27 Oct 2026 12:00:00 +0000",
      "summary": "How industry, the NCSC and the FCA worked together to help organisations share information while protecting market integrity",
      "cves": [],
      "verification_badge": "GOV / OFFICIAL VENDOR VERIFIED",
      "pillar_id": "m365_ce33",
      "gig_key": "ce33",
      "pillar_name": "Entra ID / M365 & Cyber Essentials v3.3",
      "pack_label": "\u00a329 Cyber Essentials v3.3 ('Danzell') & Entra ID Pack",
      "pack_price": "\u00a329",
      "fix_summary": "Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock external mail forwarding.",
      "tool_url": "https://faultypacket.co.uk/cyber-essentials-v3-3-danzell-readiness.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=ce33",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/run-a-cyber-essentials-v3-3-and-entra-id-pre-audit-with-evidence-pack",
      "x_intent_url": "https://x.com/intent/post?text=From%20industry%20concern%20to%20practical%20action%3A%20the%20value%20of%20working%20with%20regulators%20%28UK%20NCSC%20Advisories%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Enforce%20Conditional%20Access%20phish-resistant%20MFA%2C%20revoke%20stale%20OAuth%20consent%20grants%2C%20and%20lock%20external%20mail",
      "x_post_copy": "From industry concern to practical action: the value of working with regulators (UK NCSC Advisories)\n\nQuick check worth running today: Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock external mail"
    },
    {
      "source": "UK NCSC Advisories",
      "title": "Critical security issue affecting PHP",
      "url": "https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php",
      "published": "Wed, 21 Oct 2026 12:00:00 +0000",
      "summary": "Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619).",
      "cves": [
        "CVE-2026-109618",
        "CVE-2026-109619"
      ],
      "verification_badge": "GOV/VENDOR + CVE-2026-109618 VERIFIED",
      "pillar_id": "php_wp_web",
      "gig_key": "wp",
      "pillar_name": "WordPress, WooCommerce & PHP Runtime Shield",
      "pack_label": "\u00a312 WordPress & WooCommerce Security Shield Pack",
      "pack_price": "\u00a312",
      "fix_summary": "Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers.",
      "tool_url": "https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12",
      "fiverr_gig_url": "https://www.fiverr.com/faultypacket/audit-your-web-server-for-php2shell-cves-and-deliver-a-hardening-pack",
      "x_intent_url": "https://x.com/intent/post?text=Critical%20security%20issue%20affecting%20PHP%20%28UK%20NCSC%20Advisories%29%0A%0AQuick%20check%20worth%20running%20today%3A%20Lock%20xmlrpc.php%20%26%20wp-json%20user%20enumeration%2C%20disable%20dangerous%20PHP%20eval/exec%20primitives%2C%20and%20deploy%20strict%20HSTS",
      "x_post_copy": "Critical security issue affecting PHP (UK NCSC Advisories)\n\nQuick check worth running today: Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS"
    }
  ]
}