🔒 Security News Digest - 2026-10-21
📊 9 updates from 3 sources:
🔹 iTnews - Security: Cloudflare warns fixing botched eMudhra certs goes beyond browsers
https://www.itnews.com.au/news/cloudflare-warns-fixing-botched-emudhra-certs-goes-beyond-browsers-629804?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed
🔹 SecurityWeek: Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities
https://www.securityweek.com/accenture-dragos-sans-launch-10m-initiative-to-defend-small-us-utilities/
🔹 The Hacker News: PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
https://thehackernews.com/2026/10/php2shell-two-unpatched-critical-php.html
🔹 SecurityWeek: Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
https://www.securityweek.com/hijacked-developer-account-used-to-plant-stealer-in-ovhcloud-cli/
🔹 The Hacker News: Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
https://thehackernews.com/2026/10/hackers-hid-vasilek-backdoor-in-vmware.html
🔹 SecurityWeek: PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
https://www.securityweek.com/php2shell-mass-exploitation-looms-for-leaked-critical-php-flaws/
🔹 The Hacker News: CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
https://thehackernews.com/2026/10/cisa-orders-federal-agencies-to-patch.html
🔹 The Hacker News: State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
https://thehackernews.com/2026/10/state-bank-of-india-confirms-data-leak.html
🔹 iTnews - Security: Critical flaws strike PHP as disclosure embargo is broken
https://www.itnews.com.au/news/critical-flaws-strike-php-as-disclosure-embargo-is-broken-629794?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed