The Roundup

Security news from around the web with our take: what happened, what it means for you, and what defenders should do. We link every original story.

1 story matches your filters.

CriticalCVE-2026-109618CVE-2026-109619+11 CVEsRemote Attacker Hands-On-Keyboard UTA0576 Warp Panda ThreatRoundup research

CVE Watch: PHP2Shell Roots Firewalls as CISA Adds 12 Exploited Bugs

Oct. 23 to Nov. 2: CISA added 12 exploited bugs to KEV, led by PHP2Shell, plus Ivanti, Arista VeloCloud, Collabora, GitLab, Brotli, Magento, Cisco ASA, Fragnesia and VMware ESX. Includes a paste-ready heads-up for each.

Nov 2, 2026