Vamsoft ORF

10/26/2026

PHP warns it plans to release 2 emergency patches imminently

Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.

10/26/2026

PHP2Shell security flaws now sucessfully exploited in the wild
https://buff.ly/b8UZTox

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.

10/13/2026

Microsoft: Windows 11 23H2 reaches end of support in 30 days
https://buff.ly/Ik3n5zj

10/12/2026

Max severity SonicWall SMA1000 flaw now exploited in attacks
https://buff.ly/Ik3n5zj

Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month.

10/08/2026

Microsoft Outlook to block MSIX attachments starting November
https://buff.ly/Ik3n5zj

Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month.

10/07/2026

Hackers obtain counterfeit TLS certificates for Google and other large services

Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.

10/05/2026

Denmark population registry data breach affects 8.8 million people
https://buff.ly/kJQJfer

Denmark's Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals.

10/05/2026

V2 Security Updates Exchange 2016-SE (Sep2026)
https://buff.ly/nnjeWsO

The Exchange product group released an update for the September 2026 updates for Exchange Server SE, Exchange 2019, and Exchange 2016. The Security Update for Exchange SE is publicly available. Sec…

10/02/2026

Memory executives expect RAM shortage to continue through 2028

Prices for memory sold for 2027 "are much higher than 2026 prices."

10/02/2026

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
https://buff.ly/d6Gq1BW

Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices.