[schneider-electric]

October 27, 2026

• CISA added CVE-2026-109618 and CVE-2026-109619 to KEV on October 26, moving PHP2Shell from scanning and attempt data to an official exploited designation, with a federal remediation deadline attached (@DailyDarkWeb). SecurityWeek reports attackers launched 35 shells from two IP addresses against honeypots on October 24 (SecurityWeek), and Delft Threat Intelligence Lab's public dashboard counted ~54,974 requests from 608 source IPs across 70 countries since October 21, of which 171 IPs delivered code or droppers (@DailyDarkWeb). Siemens, Schneider Electric and ABB have confirmed affected products (SecurityWeek) (earlier coverage). · Vulnerabilities & Exploits

in Brotli's Blast Radius Widens as PHP2Shell Lands on KEV

July 2, 2026

• Kaspersky flagged active exploitation of CVE-2024-2658 in Schneider Electric FlexNet Publisher — local privilege escalation via crafted openssl.cnf and DLL loading against ICS environments. Securelist. · Vulnerabilities & Exploits

in Scattered Spider Suspect Grabbed at Helsinki Airport, Extradited to the US