CVE-2026-108360: [phpoffice/phpspreadsheet] PhpSpreadsheet:… (GitHub Security Advisories)

2026-10-27T15:38:39Z

[GitHub Security Advisories · GITHUB GHSA-2phh-27fw-q4gc + CVE-2026-108360 VERIFIED] ## Summary PhpSpreadsheet's `Worksheet\Drawing::setPath()` validates an external-image URL against an operator-supplied `isWhitelisted` callback **once**, on the initial URL only, then fetches it with `file_get_contents()` using a stream co — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

CVE-2026-108082: [symfony/http-foundation] Symfony: ReDoS in… (GitHub Security Advisories)

2026-10-27T19:01:39Z

[GitHub Security Advisories · GITHUB GHSA-r925-mgvr-h9cc + CVE-2026-108082 VERIFIED] ### Description `HeaderUtils::split()` parsed header values with a pattern whose token alternative also matched whitespace, followed by a `(?

CVE-2026-109413: [symfony/symfony] Symfony: Unbounded Recursion… (GitHub Security Advisories)

2026-10-27T19:01:50Z

[GitHub Security Advisories · GITHUB GHSA-2v3c-qxhr-7vpv + CVE-2026-109413 VERIFIED] ### Description `Yaml\Parser::lexInlineStructure()` recursed through `lexInlineMapping()` and `lexInlineSequence()` for every `{` and `[` of an inline collection, without entering the nesting level that the rest of the parser bounds with `m — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

CVE-2026-116675: [tinymce] TinyMCE Cross-Site Scripting (XSS)… (GitHub Security Advisories)

2026-10-27T21:07:12Z

[GitHub Security Advisories · GITHUB GHSA-mf2p-h6hf-fcwm + CVE-2026-116675 VERIFIED] ### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via elements crafted through the data-mce-object attribute, which are created and executed before sanitization. Impacts users of TinyMCE with th — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to… (The Hacker News)

Thu, 29 Oct 2026 13:54:22 +0530

[The Hacker News · VERIFIED 6-FEED SECURITY RADAR] Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce… (The Hacker News)

Thu, 29 Oct 2026 11:52:33 +0530

[The Hacker News · VERIFIED 6-FEED SECURITY RADAR] The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus thre — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto… (The Hacker News)

Thu, 29 Oct 2026 11:20:17 +0530

[The Hacker News · VERIFIED 6-FEED SECURITY RADAR] Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Active exploitation has been observed targeting the Palo Alto Networks management interf — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day… (The Hacker News)

Wed, 28 Oct 2026 23:38:33 +0530

[The Hacker News · VERIFIED 6-FEED SECURITY RADAR] The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train u — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

Google to Allow One-Tap Android App Installs From Approved… (The Hacker News)

Wed, 28 Oct 2026 22:38:09 +0530

[The Hacker News · VERIFIED 6-FEED SECURITY RADAR] Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full — Immediate UK Mitigation (£29 Cyber Essentials v3.3 ('Danzell') & Entra ID Pack): Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock external mail forwarding. Verify free at https://faultypacket.co.uk/cyber-essentials-v3-3-danzell-readiness.html

CISA Adds Two Known Exploited Vulnerabilities to Catalog (CISA Advisories)

Wed, 28 Oct 26 12:00:00 +0000

[CISA Advisories · GOV/VENDOR + CVE-2026-41709 VERIFIED] CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux Kernel Missing Initialization of — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

Mitsubishi Electric GENESIS, ICONICS Suite & MobileHMI Advisory (CISA Advisories)

Tue, 27 Oct 26 12:00:00 +0000

[CISA Advisories · GOV/VENDOR + CVE-2023-4863 VERIFIED] View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations (CVE-2026-16438), resulting in info — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

EPICS Base (CISA Advisories)

Tue, 27 Oct 26 12:00:00 +0000

[CISA Advisories · GOV / OFFICIAL VENDOR VERIFIED] View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code. The following versions of EPICS Base are a — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

From industry concern to practical action: the value of working… (UK NCSC Advisories)

Tue, 27 Oct 2026 12:00:00 +0000

[UK NCSC Advisories · GOV / OFFICIAL VENDOR VERIFIED] How industry, the NCSC and the FCA worked together to help organisations share information while protecting market integrity — Immediate UK Mitigation (£29 Cyber Essentials v3.3 ('Danzell') & Entra ID Pack): Enforce Conditional Access phish-resistant MFA, revoke stale OAuth consent grants, and lock external mail forwarding. Verify free at https://faultypacket.co.uk/cyber-essentials-v3-3-danzell-readiness.html

Critical security issue affecting PHP (UK NCSC Advisories)

Wed, 21 Oct 2026 12:00:00 +0000

[UK NCSC Advisories · GOV/VENDOR + CVE-2026-109618 VERIFIED] Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619). — Immediate UK Mitigation (£12 WordPress & WooCommerce Security Shield Pack): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify free at https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html

BIMI Logo Not Showing in Gmail? Checklist | FaultyPacket