The security incidents that need action. Every morning.

Today: 29 incidents need action

1. Videostrong Technology Set-top boxes Android… · Exploitation confirmedCritical

   Google Dismantles 1.3 Million TV Box Botnet; Factory Backdoor Remains

   Google and partners dismantled the XCPE botnet of more than 1.3 million Android TV set-top boxes and took down its command servers. Google says Chinese manufacturer Videostrong shipped the x.cpe backdoor in factory firmware and sold access to criminals, who used the boxes as residential proxies and for ad fraud. The backdoor remains in firmware, reinstalls after restart and cannot be removed by owners; affected devices, seen in 182 models, should be replaced.

2. SonicWall Global Management System · Exploitation confirmedCritical

   Critical unpatched SonicWall GMS flaw exposes internal files without authentication

   SonicWall disclosed two vulnerabilities in its Global Management System (GMS): CVE-2026-109593 (CVSS 9.1) allows access to internal files without credentials or

   Summary, impact and fix in tomorrow's edition

3. PHP · Exploitation confirmedCritical

   PHP2Shell campaign reaches several hundred victims, researcher estimates

   The PHP2Shell chain combines two PHP use-after-free flaws (CVE-2026-109618 and CVE-2026-109619) enabling remote code execution and is confirmed under active exp

   Summary, impact and fix in tomorrow's edition