Covers: Vulnerabilities & PatchingGovernance, Risk & ComplianceCloud SecurityData BreachesAI SecurityThreat Actors & Nation-StateSupply Chain & AppSecDetection & ResponseZero-Days & ExploitsEndpoint & Network Security
Qualys' Threat Research Unit found more than 166 million PHP installations across over 10,000 customer environments, roughly three-quarters of them internet-facing, and observed attack activity within hours of the October PHP2Shell disclosure while only a...
Microsoft's November 2026 Patch Tuesday addressed 1,235 vulnerabilities, including 63 rated critical and 1,029 important, plus 142 affecting Chromium-based Microsoft Edge. Only one of the month's vulnerabilities was exploited in the wild, and Adobe...
Fixes for PHP2Shell and Node2Shell shipped on October 21, and CISA added PHP2Shell to its Known Exploited Vulnerabilities catalog on October 26 and Node2Shell on October 27, after Amazon Threat Intelligence saw attackers probing PHP2Shell four days before...
Qualys reports that Microsoft addressed 63 CVEs in November 2025 but 1,252 in November 2026, nearly 20 times higher, with an average of roughly 650 CVEs per month since April 2026 versus about 74 between November 2025 and March 2026. As of 3 p.m. MT on...