Touchpoint Security
@[email protected]
Touchpoint Security delivers managed detection and response, exposure management and security advisory services to small, mid-sized and enterprise organisations. Our 24/7 SOC integrates with your existing security stack, backed by contractual response SLAs and dedicated senior analysts. Services include attack surface management, threat intelligence, compliance assessments (ISO 27001, NIS2, GDPR), penetration testing, vCISO, cloud security and incident response retainers.
Open remote profile ↗Daily brief, Oct 26:
- PHP2Shell CVE-2026-109618/-109619 (CVSS 9.2): PAN-OS mgmt UI hotfixes 10.2.18-h13/11.1.16-h4/11.2.10-h16 out, rest Oct 27-30. Patch PHP, session.upload_progress.enabled=0, hunt since Oct 17
- Gheist: hunt ci-sync-* branches, UA gheist; rotate all repo secrets
- Tailscale SSH (no CVE/fix): per-pair grants, no forwarding
- CVE-2026-111497: .NET 8.0.33/9.0.22/10.0.14; rebuild self-contained apps
https://tp-security.com/news/cyber-brief-2026-10-26-panos-gheist-tailscale-brotli
#InfoSec #PatchNow #BlueTeam #DevSecOps
Touchpoint SecurityPHP2Shell Fixes Reach PAN-OS as Stolen GitHub Tokens Drain CI SecretsPAN-OS PHP2Shell hotfixes begin shipping, Gheist abuses GitHub tokens to steal CI secrets, Tailscale SSH flaws go unpatched, and .NET fixes Brotli.
Weekly roundup, Oct 19–25:
- PHP2Shell CVE-2026-109618/-109619 (CVSS 9.2): fixed 8.5.12/8.4.27/8.3.36/8.2.35; probes since Oct 17. After patching, hunt new .php files in upload/cache dirs and PHP_SESSION_UPLOAD_PROGRESS POSTs
- KEV: Arista VCO CVE-2026-114625, Collabora CVE-2026-110447
- Node2Shell CVE-2026-111497: Node 22.23.4/24.22.1/26.12.1
- Okta lookalikes: riskified-okta[.]com, gladly-okta[.]com
https://tp-security.com/news/weekly-roundup-2026-10-25-php2shell-edge-flaws
#InfoSec #PatchNow #BlueTeam #Phishing
Today's brief:
- PHP2Shell CVE-2026-109618/-109619 (CVSS v4 9.2): fixed 8.5.12/8.4.27/8.3.36/8.2.35. Probed since Oct 17; hunt PHP_SESSION_UPLOAD_PROGRESS + LFI of sess_ files
- Arista VCO CVE-2026-114625 (9.9), exploited: fixed 5.2.3.18/6.1.3.10/6.4.2.12
- LiteLLM 1.107.0 backdoored; exfil www.litellm[.]dev/healthcheck; pin 1.106.2, rotate secrets
- GitLab CVE-2026-110264 (10.0)
https://tp-security.com/news/cyber-brief-2026-10-23-php2shell-arista-velocloud-litellm
#InfoSec #PatchNow #BlueTeam #SupplyChainSecurity
