cybersecuritynews

Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability

Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates. Published on October 21, 2026, the ...
arcticwolf

PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...

What happens with Tomcat vulnerabilities? An easy-to-understand guide to the risks of authentication bypass and information leakage, and how to respond ... - note（ …

Even when you hear that a vulnerability has been found in Tomcat, it is hard to know what the danger is or if it affects your ...

PHP Vulnerability Response: Are You Only Doing It for Work? A Checklist for Personal Sites and Development Environments

Thank you for your hard work dealing with the recent string of vulnerabilities. It is difficult to stay calm when you have to ...