BRIEFOtherlowP45
AnkaTeam hacks the website of Spanish club Villarreal CF
Villarreal CF
Detected12 September 2026 · 15:12 UTC
Reposts collapsed2
The Turkish hacking group AnkaTeam claims to have compromised Villarreal CF, a Spanish La Liga football club, as part of a defacement and data-theft campaign. Sports organizations hold fan personal data, ticketing and payment information, plus partner credentials that can be abused for fraud and downstream attacks. The public claim raises reputational risk and warrants verification of any leaked data.
CategoryOther
Severitylow
Priority score45
Detected12 September 2026 · 15:12 UTC
Other● 45
PoC público de carga de archivos en el plugin Contact ManagerA working proof-of-concept for an unauthenticated arbitrary file upload in the Contact Manager plugin for WordPress (versions <= 9.1.2) was published today on the SpyHackerz forum. The flaw lets an unauthenticated attacker drop a web shell, which normally leads to full site compromise and hosting of further malware. Because the plugin is widely deployed on small business and public-sector sites, mass scanning is expected within days.Other● 24
Comprador busca documentos de identidad argentinos en BreachForumsA BreachForums user (kBpXuXJUsD) posted a buying request this morning for Argentine identity documents, signaling active demand for stolen DNI/passport data in the local market. There is no sample or named source yet, but such requests typically precede bulk sales of impersonation kits used for bank onboarding and benefit fraud in Argentina. It is worth watching as an early indicator of a circulating Argentine identity-data set rather than a confirmed breach.Other● 44
Exploit php2hell listo para usar contra PHP 5.x–8.5A Niflheim forum post distributes a pre-built 'php2hell' webshell along with details for CVE-2026-109618 and CVE-2026-109619, affecting PHP 5.x through 8.5. PHP underpins a large share of Latin American government and municipal web portals, so a turnkey webshell lowers the bar for mass site compromise and data theft. The CVE references are unverified and should be checked against vendor advisories.Other● 63
Venta de exploit RCE de Chromium para Windows 10/11 (cadena completa)A seller is offering a full Chromium renderer RCE chain affecting Windows 10/11 browsers, posted 21 Oct 2026. Weaponized browser exploits enable drive-by initial access, compromising endpoints without user interaction and bypassing many perimeter controls. Fresh, possibly unpatched browser RCE capabilities are prime enablers of intrusion and ransomware campaigns.Other● 48
Publicado exploit masivo php2shell (CVE-2026-109618/109619)A forum user posted a PoC tool ('php2shell') for mass exploitation of two recent vulnerabilities, CVE-2026-109618 and CVE-2026-109619, described as a bulk exploit. Public tooling for a fresh CVE sharply shortens the window before opportunistic scanning and web-shell deployment hits PHP-based public sites. Defenders running exposed PHP applications, common in government portals and telco/banking web fronts, should check patch status now.Other● 35
PoC de explotación masiva 'php2shell' para vulnerabilidades PHPA user released a 'php2shell' proof-of-concept claiming mass, bulk exploitation of two PHP vulnerabilities (CVE-2026-109618/CVE-2026-109619) to drop web shells. If functional, it lowers the bar for opportunistic mass compromise of PHP web servers, enabling webshell planting and follow-on intrusion. Defenders should patch exposed PHP stacks and hunt for webshell indicators; source is low-reliability so authenticity is unverified.