Two critical #PHP flaws, CVE-2026-109618 and CVE-2026-109619 (#PHP2Shell), can let attackers take over web servers without logging in. Upgrade immediately to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart. security.com/threat-intellig…

Why #PHP2Shell is serious: no login needed, details are public, and a patched application on an unpatched #PHP runtime stays exposed. Find every PHP instance, including containers and appliances, and patch the runtime. security.com/threat-intellig…

#ThreatProtection #PHP2Shell - Critical vulnerabilities in PHP allow remote code execution through out-of-memory errors and stale global state. Read more: broadcom.com/support/securit…

#ThreatProtection BRONZE SANDCASTLE leverages DLL sideloading to deliver custom implant, read more about Symantec's coverage: broadcom.com/support/securit… #malware

To make hijacked #AI models comply, the operators layered a fake identity, a "devoted companion" persona, and a protocol telling the model to dismiss its own safety warnings. Our AI honeypot captured the campaign, dozens of offensive tools included. security.com/threat-intellig…

#NEW - Symantec researchers uncover autonomous offensive agent built to take over exposed #AIs and leverage them for further exploitation and profit, all at the expense of the model's owner. security.com/threat-intellig…

#ThreatProtection #ROMULUS #ClickFix platform delivers malicious payloads through social engineering techniques. Read more about Symantec's protection: broadcom.com/support/securit…

#ThreatProtection #QuartzLine Zenith #Backdoor, read more about Symantec's protection: broadcom.com/support/securit…

#NEW - Swallowtail (aka #APT28): Russian espionage group targets defense firms in two #NATO countries, including a naval shipbuilder, a military aircraft engine maker and a law enforcement agency. Read more: security.com/threat-intellig…

#ThreatProtection #GhostProfile #MacOS #malware, read more about Symantec's protection: broadcom.com/support/securit…

#ThreatProtection #KGB #RAT - a commodity malware sold as #Malware-as-a-Service, read more about Symantec's protection: broadcom.com/support/securit…

#ThreatProtection UAT-6275 targets organizations across the Commonwealth of Independent States, read more about Symantec's protection: broadcom.com/support/securit…

Aoki: #Infostealer Targets #AI Coding Assistant Credentials - Stolen API keys and tokens can allow attackers to carry out activity under a legitimate user's identity and API quota. Read more: security.com/threat-intellig…

#ThreatProtection #Hirudo #Android #malware, read more about Symantec's protection: broadcom.com/support/securit…

#NEW - Aoki: #Infostealer Targets #AI Coding Assistant Credentials - Little-documented infostealer steals API keys and tokens from AI coding assistants, including Claude, Codex, Cursor and Gemini. Read more: security.com/threat-intellig…

#ThreatProtection #MATCHBOIL #downloader used by Russia-aligned threat actor UAC-0099 targets critical sectors in Ukraine. Read more about Symantec's protection: broadcom.com/support/securit… #malware

#ThreatProtection Another #phishing campaign distributing #AgentTesla #malware observed in the wild, read more about Symantec's protection: broadcom.com/support/securit…

#ThreatProtection Evolving beyond basic credential theft, updated #XWorm variants now bypass Windows location prompts and stream live microphone feeds. Read more about Symantec's protection: broadcom.com/support/securit… #malware

#ThreatProtection MaaS infostealer named Warden Stealer is targeting Windows users through ClickFix lures and malvertising. Read more about Symantec's protection: broadcom.com/support/securit…

#ThreatProtection GhostAction now phishes open-source maintainers with fake GitHub sign-in alerts to steal credentials, 2FA codes and OAuth tokens. Read more about Symantec’s protection: broadcom.com/support/securit…