SANS Stormcast Friday, October 23rd, 2026: PHP2Shell Exploitation Update; Signal Call Hang-Up Flaw (CVE-2026-113380); Cisco Snort 3 Critical Vulnerabilities; Linux KSMBD RCE Reports Leaked
MentionsCiscoAmazon Web ServicesCloudflareQNAPLinux kernel
Runs 7:39. Streams from traffic.libsyn.com only when you press play.
Today's episode covers an update on the PHP2Shell vulnerabilities, a Signal flaw that kept calls alive after hang-up, critical Cisco Snort 3 vulnerabilities, and Linux kernel KSMBD vulnerability reports that were accidentally posted to a public mailing list. PHP Vulnerability Update Patches for the PHP remote code execution (RCE) vulnerabilities are now available from many vendors, with notable exceptions such as QNAP. Cloudflare reports a lot of exploit activity, and Amazon saw exploit attempts before public disclosure, but no simple, reliable exploit has surfaced yet.
Show notes from SANS Internet Storm Center StormCast.
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.
