Skip to content
CHRONOSAlerts
Global risk

Search

3 RESULTS

  1. Urgency level L4 Major NewsCybersecurity & Infrastructure

    CISA adds CVE-2026-109618 and CVE-2026-109619 ("PHP2Shell") to KEV; CISA confirms active exploitation

    CISA added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities catalog (Tenable: "Update October 26: CISA added CVE-2026-109618 and CVE-2026-109619 to its KEV catalog.") and reporting states CISA confirms the PHP2Shell flaws are being exploited in attacks (BleepingComputer: "CISA confirms PHP2Shell vulnerabilities now exploited in attacks."). CISA is urging organizations to immediately patch affected PHP installations (GovDelivery: "CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619.").

  2. Urgency level L3 Important NewsEnergy

    Shell begins partial restart of Qatar Pearl GTL after March damage, exports still constrained

    Shell confirmed a limited test restart of its Pearl gas-to-liquids plant in Qatar on October 8, while Train 2 repairs and Hormuz shipping restrictions continue.

  3. Urgency level L3 Important NewsCybersecurity & Infrastructure

    ShinyHunters expands Oracle PeopleSoft exploitation after bypassing WAF defenses

    Google Threat Intelligence Group and Mandiant report renewed mass exploitation of CVE-2026-35273 in Oracle PeopleSoft, with attackers adapting their exploit to bypass WAF mitigations and deploying web shells on dozens of systems globally across government, healthcare, transportation, technology, agriculture, IT services and higher education.