Skip to main content

The Identity at the Core

The Definitive Chronicle of Identity & Access Management

THE HACKER NEWS

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate unauthenticated remote code execution on affected deployments - CVE-2026-109618 - An out-of-memory

By The Hacker News
THE HACKER NEWS

Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento

An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks. "When you

By The Hacker News
THE HACKER NEWS

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses automatically. cURL leaves that off by default, but

By The Hacker News
THE HACKER NEWS

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation scams or to deliver malware. "A consistent pattern of attacker behavior has emerged across these incidents: the use of the same throwaway tenants, the same 'IT

By The Hacker News
Latest from the newsroom

IAM in the United States

Regulation and compliance that decide how identity is run where you are
Our coverage of the United States
Regulation

NIST Finalizes Guidance on Keeping Identity and Access Tokens Out of Attackers' Hands

NIST has finalized a publication meant to help organizations stop exposing online identity and access tokens to attackers. Here is what it covers and what is not yet clear.

Sep 27184 views
Regulation

CISA and NIST Publish Guidance on Cloud Identity Token Theft, Forgery and Misuse

CISA and NIST have issued joint guidance for federal cloud identity systems focused on tokens. Here is what the announcement says, and what it doesn't yet.

Sep 23248 views
Regulation

CISA Publishes Guidance to Help Critical Infrastructure Detect, Observe and Impede Attacks

CISA has released new guidance for critical infrastructure operators on detecting, observing and impeding malicious cyber activity. Here is what is known so far.

Sep 23225 views
All regulatory trackers →

US Regulatory & Compliance Tracker

NIST SP 800-63 Digital Identity Guidelines
● Rev 4 Final Released July 2025
CISA Zero Trust Maturity Model
● Version 2.0 Published and In Effect
NYDFS Cybersecurity Regulation (23 NYCRR 500)
● Awaiting first review
HIPAA Security Rule
● Awaiting first review
CCPA / CPRA Regulations
● In Force; Updates Effective January 1, 2026
Last reviewed: Oct 25, 2026
🚨 Oops... Another One
Live breach and vulnerability intelligence - updated as it happens
Breach Intelligence
● LIVE
Vulnerability Tracker
● LIVE

Never Miss a Breach, CVE, or Industry Shift

Join thousands of IAM professionals getting the weekly Intelligence Brief every Monday morning.

How often
What to include