https://shellbulletin.com/section/vulnerabilities/secure-accounts-after-bluesky-phishing-campaign/Shell Bulletinen2026-10-22T18:39:57ZSecure Accounts After Bluesky Phishing Campaign Compromises 4,500 Usershttps://shellbulletin.com/section/cyber-attacks/verify-login-requests-immediately-to-stop-ai/Shell Bulletinen2026-10-22T16:05:46ZVerify Login Requests Immediately to Stop AI-Enhanced Account Takeovershttps://shellbulletin.com/section/vulnerabilities/remove-yishaadmin-versions-2-2-through-3-1-to/Shell Bulletinen2026-10-22T15:37:45ZRemove YiShaAdmin Versions 2.2 Through 3.1 to Stop Unauthenticated File Deletionhttps://shellbulletin.com/section/vulnerabilities/patch-php-servers-now-to-block-pre-auth-remote/Shell Bulletinen2026-10-22T09:20:36ZPatch PHP Servers Now to Block Pre-Auth Remote Code Execution Flawshttps://shellbulletin.com/section/vulnerabilities/check-tms-amelia-versions-now-to-block-critical/Shell Bulletinen2026-10-22T08:12:15ZCheck TMS Amelia versions now to block critical SQL injection riskhttps://shellbulletin.com/section/vulnerabilities/secure-uefi-firmware-to-stop-blackx-bootkit-from/Shell Bulletinen2026-10-22T06:32:57ZSecure UEFI Firmware to Stop BlackX Bootkit from Bypassing Secure Boothttps://shellbulletin.com/section/vulnerabilities/upgrade-dynamodb-mcp-server-to-stop-code/Shell Bulletinen2026-10-22T05:43:12ZUpgrade DynamoDB MCP Server to Stop Code Execution on Hostshttps://shellbulletin.com/section/vulnerabilities/secure-soa-suite-endpoints-against-cve-2026-91216/Shell Bulletinen2026-10-22T04:32:00ZSecure SOA Suite Endpoints Against CVE-2026-91216 System Takeover Riskhttps://shellbulletin.com/section/vulnerabilities/secure-oracle-essbase-21-8-3-0-0-against/Shell Bulletinen2026-10-22T03:41:12ZSecure Oracle Essbase 21.8.3.0.0 Against Unauthenticated System Takeoverhttps://shellbulletin.com/section/vulnerabilities/check-localai-gallery-settings-to-stop-server/Shell Bulletinen2026-10-22T00:58:38ZCheck LocalAI Gallery Settings to Stop Server-Side Request Forgery Attackhttps://shellbulletin.com/section/vulnerabilities/isolate-unpatched-php-servers-now-critical-remote/Shell Bulletinen2026-10-22T00:34:37ZIsolate Unpatched PHP Servers Now: Critical Remote Code Execution Flaws CVE-2026-109618 and 109619 Patchedhttps://shellbulletin.com/section/vulnerabilities/patching-oracle-java-and-graalvm-essential-to/Shell Bulletinen2026-10-21T23:03:49ZPatching Oracle Java and GraalVM Essential to Block Remote JSSE Data Theft via CVE-2026-91403https://shellbulletin.com/section/cyber-attacks/verify-property-listings-directly-to-avoid/Shell Bulletinen2026-10-21T12:20:12ZVerify Property Listings Directly to Avoid Booking.com Scam Riskshttps://shellbulletin.com/section/vulnerabilities/update-argo-cd-now-low-privileges-enable-server/Shell Bulletinen2026-10-21T08:05:16ZUpdate Argo CD Now: Low Privileges Enable Server-Side Code Execution via Helm Plugin Injectionhttps://shellbulletin.com/section/vulnerabilities/deploy-kernel-patches-now-to-block-critical-linux/Shell Bulletinen2026-10-21T07:20:47ZDeploy Kernel Patches Now to Block Critical Linux KVM Escape Flawhttps://shellbulletin.com/section/vulnerabilities/review-ip-binding-configurations-in-ibm-app/Shell Bulletinen2026-10-21T07:16:37ZReview IP Binding Configurations in IBM App Connect Enterprise to Prevent Data Exposurehttps://shellbulletin.com/section/vulnerabilities/patch-php-servers-now-to-block-remote-code/Shell Bulletinen2026-10-21T04:40:21ZPatch PHP servers now to block remote code execution via two severe flawshttps://shellbulletin.com/section/vulnerabilities/prepare-php-systems-for-october-21-critical/Shell Bulletinen2026-10-21T04:05:29ZPrepare PHP Systems for October 21 Critical Security Patch Releasehttps://shellbulletin.com/section/vulnerabilities/update-tomcat-9-11-immediately-to-fix-cve-2026/Shell Bulletinen2026-10-20T21:20:41ZUpdate Tomcat 9-11 immediately to fix CVE-2026-101296 JNDI realm SASL auth bypass critical flawhttps://shellbulletin.com/section/vulnerabilities/download-apache-tomcat-11-0-27-now-to-prevent/Shell Bulletinen2026-10-20T19:01:11ZDownload Apache Tomcat 11.0.27 Now to Prevent Cross-Request Data Leaks in AJP Protocol