Author: CWME Research & Threat Intelligence Desk

instagramlinkedinwebsite
The CWME Research & Threat Intelligence Desk produces evidence-led cybersecurity coverage for Cyber Warriors Middle East, with a focus on threat intelligence, ransomware, cybercrime, vulnerabilities, defensive research and emerging security risks. Its reporting distinguishes verified developments, attributed research findings and unconfirmed threat-actor claims while prioritising source transparency, technical accuracy and defensive relevance.
https://cyberwarriorsmiddleeast.com

Ubuntu security notice USN-8955-1 addresses multiple nginx vulnerabilities

Resources
Ubuntu has issued security notice USN-8955-1, addressing multiple vulnerabilities in nginx that could allow remote attackers to exploit the software. These vulnerabilities could lead to denial of service or arbitrary code execution, affecting various versions of...

Texas sues OpenAI, alleging deceptive marketing of ChatGPT’s safety features

Global
Texas has filed a lawsuit against OpenAI and its CEO, Sam Altman, alleging deceptive marketing practices regarding the safety of its ChatGPT product. The suit, initiated under the state's deceptive trade practices laws, claims that OpenAI...

eMudhra’s intermediate CA certificates compromised due to cryptographic defect, prompting revocation

Dark Watch
Eight intermediate certificate authority (CA) private keys belonging to Indian CA eMudhra Limited were compromised due to a critical cryptographic defect during the certificate...

Red Hat releases critical security update for ca-certificates in RHEL 8.6

Resources
Red Hat has issued a critical security update for the ca-certificates package in Red Hat Enterprise Linux (RHEL) 8.6, affecting both Advanced Mission Critical...

Storm-0940 leverages ARTEX AI framework for rapid supply chain attacks on global organizations

Features
In September 2026, the China-state aligned actor Storm-0940 began utilizing the ARTEX framework, an agentic AI penetration testing tool, to automate attacks on hundreds...

City of Columbia confirms ransomware attack disrupting online services, investigation ongoing

Dark Watch
The City of Columbia, South Carolina, has confirmed that a cybersecurity incident identified on October 24, 2026, was a ransomware attack that disrupted several...

Critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619 identified by Unit 42

Features
Recent findings from Unit 42 have identified critical vulnerabilities in PHP, specifically CVE-2026-109618 and CVE-2026-109619, which could allow attackers to execute arbitrary code on...

Compromised LiteLLM 1.107.0 package leads to widespread credential theft via Python startup hooks

Dark Watch
On October 21, 2026, a compromised version of the LiteLLM 1.107.0 package was uploaded to the Python Package Index (PyPI), leading to significant credential...
rec5

Arista Networks VeloCloud Orchestrator vulnerable to CVE-2026-114625, exploited in the wild

Resources
Arista Networks has reported a critical vulnerability, CVE-2026-114625, affecting its VeloCloud Orchestrator (VCO) products, with confirmed exploitation in the wild as of October 22,...

New BlackX UEFI bootkit exploits Baton Drop vulnerability in targeted APT campaign

Features
In early 2026, researchers identified a new UEFI bootkit, dubbed BlackX, that exploits the Baton Drop vulnerability (CVE-2022-21894) in a targeted APT campaign against...

Mirai botnet operators attempt to exploit PHP2Shell vulnerabilities, no confirmed breaches reported

Dark Watch
In a concerning development, operators of the Mirai botnet have begun attempting to exploit critical vulnerabilities in PHP2Shell, following the release of emergency patches...

Critical vulnerabilities CVE-2026-109618 and CVE-2026-109619 affect all PHP versions

Resources
Critical vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619 have been reported to affect all versions of PHP, as noted by the Australian Cyber Security Centre...

Columbia, South Carolina, responds to cyberattack disrupting government systems

Dark Watch
The city of Columbia, South Carolina, is currently addressing a cyberattack that has disrupted several government systems, including the MyColaSC platform used for utility...

CrowdStrike achieves Enhanced Level assurance from UK NCSC for high-stakes incident response

Features
In a significant development for cybersecurity in the UK, CrowdStrike has achieved Enhanced Level assurance from the National Cyber Security Centre (NCSC) under its...
rec5
123...34Page 1 of 34

Recent articles

spot_img