Cybersecurity briefing, 2026-10-25

Two actively exploited flaws lead the briefing.

• Collabora backdoors target credential stores as VCO flaws recur
• APT41's BlackX bootkit keeps Secure Boot bypass alive
• Time4Popcorn updater put millions at risk of elevated code execution
• PHP2Shell attempts still fall short of confirmed infection
• LiteLLM malware steals credentials beyond the gateway

Recent editions

• Saturday, October 24, 2026: Ransomware affiliates use AI to coordinate edge intrusions · 16 stories
• Friday, October 23, 2026: Ruby regex bugs expose applications beyond GitLab · 19 stories
• Thursday, October 22, 2026: PHP2Shell attempts still fall short of confirmed infection · 18 stories
• Wednesday, October 21, 2026: Cisco's eMudhra review leaves product exposure unresolved · 16 stories
• Tuesday, October 20, 2026: Siemens signed launcher hides a trojanized installer · 15 stories
• Monday, October 19, 2026: Rank Math PRO backdoor outlives the plugin · 18 stories
• Sunday, October 18, 2026: PwnEscape breaks Linux VM isolation at the host layer · 1 story