https://dkcissp.com/news/3cf5c5ea08d06752969cDKCISSPen2026-10-22T17:18:22.000ZArista patches new VeloCloud Orchestrator zero-day exploited in attackshttps://dkcissp.com/news/3cc91c2331d599f53157DKCISSPen2026-10-22T17:12:51.604ZRace to update services' computer systems after cyber-security flaw foundhttps://dkcissp.com/news/55c55c6b96ece1513a32DKCISSPen2026-10-22T17:01:53.000ZTwo CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixeshttps://dkcissp.com/news/856bed21387abae2ffd5DKCISSPen2026-10-22T15:49:32.000ZMicrosoft shares how to fix broken Exchange Online EWS appshttps://dkcissp.com/news/cfe870204eb493954878DKCISSPen2026-10-22T13:05:00.000ZIranian Hacking Group Found Hosting C2 Infrastructure in the UShttps://dkcissp.com/news/da5030dfe14232cc9126DKCISSPen2026-10-22T10:44:05.000ZOpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSLhttps://dkcissp.com/news/f8f67433cb377812cde4DKCISSPen2026-10-22T10:17:26.604ZZoe Kleinman: PHP is the cyber equivalent of an unexploded bombhttps://dkcissp.com/news/7ffdb667496688a447acDKCISSPen2026-10-22T07:47:22.000ZNode.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versionshttps://dkcissp.com/news/f5c2e16ea76ba32992afDKCISSPen2026-10-22T01:32:37.000ZCritical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releaseshttps://dkcissp.com/news/1bc8ad7a5bad71048e07DKCISSPen2026-10-21T18:34:42.000ZCISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servershttps://dkcissp.com/news/1d521fe72f0fe9dd181aDKCISSPen2026-10-21T18:01:57.000ZLiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoorhttps://dkcissp.com/news/4abb4b1a324cbc33744dDKCISSPen2026-10-21T16:49:17.000ZEight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Softwarehttps://dkcissp.com/news/3034610438b367b31c4dDKCISSPen2026-10-21T16:00:49.000ZThreat Report Archiveshttps://dkcissp.com/news/e8df38b00cd50e3d6586DKCISSPen2026-10-21T12:20:22.000ZPHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn'thttps://dkcissp.com/news/f2f3edeb4e85f7fc2586DKCISSPen2026-10-21T12:09:22.519ZInstall critical PHP safety update or go offline, cyber chiefs tell websiteshttps://dkcissp.com/news/c2bec59a87de7749d731DKCISSPen2026-10-21T10:32:40.000ZThe Harness Is the Hard Part of Agentic Pentestinghttps://dkcissp.com/news/5e988fd364da558036e2DKCISSPen2026-10-21T09:30:38.000ZGrafana Labs connects observability and incident response with Knowledge Graph - Help Net Securityhttps://dkcissp.com/news/7c903495e212f614231eDKCISSPen2026-10-21T07:11:15.000ZConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incidenthttps://dkcissp.com/news/e60c09da8c5441ae72adDKCISSPen2026-10-21T01:01:50.000ZStolen UpdraftCentral keys used to backdoor WordPress siteshttps://dkcissp.com/news/3f92542c9e840ea51b3fDKCISSPen2026-10-21T00:00:00.000ZCritical security issue affecting PHP