BRIEFOtherlowP35
Villarreal CF reportedly hacked by AnkaTeam
Villarreal CF
Detected12 September 2026 · 12:12 UTC
A TurkHackTeam post claims the Spanish football club Villarreal CF was hacked by the 'AnkaTeam' group, likely a defacement/leak claim. While not critical infrastructure, a named Spanish entity being targeted is worth a quick check for leaked fan/customer data or defacement evidence. Impact and authenticity are unverified, so treat as low-confidence.
CategoryOther
Severitylow
Priority score35
Detected12 September 2026 · 12:12 UTC
Other● 44
Exploit php2hell listo para usar contra PHP 5.x–8.5A Niflheim forum post distributes a pre-built 'php2hell' webshell along with details for CVE-2026-109618 and CVE-2026-109619, affecting PHP 5.x through 8.5. PHP underpins a large share of Latin American government and municipal web portals, so a turnkey webshell lowers the bar for mass site compromise and data theft. The CVE references are unverified and should be checked against vendor advisories.Other● 63
Venta de exploit RCE de Chromium para Windows 10/11 (cadena completa)A seller is offering a full Chromium renderer RCE chain affecting Windows 10/11 browsers, posted 21 Oct 2026. Weaponized browser exploits enable drive-by initial access, compromising endpoints without user interaction and bypassing many perimeter controls. Fresh, possibly unpatched browser RCE capabilities are prime enablers of intrusion and ransomware campaigns.Other● 48
Publicado exploit masivo php2shell (CVE-2026-109618/109619)A forum user posted a PoC tool ('php2shell') for mass exploitation of two recent vulnerabilities, CVE-2026-109618 and CVE-2026-109619, described as a bulk exploit. Public tooling for a fresh CVE sharply shortens the window before opportunistic scanning and web-shell deployment hits PHP-based public sites. Defenders running exposed PHP applications, common in government portals and telco/banking web fronts, should check patch status now.Other● 35
PoC de explotación masiva 'php2shell' para vulnerabilidades PHPA user released a 'php2shell' proof-of-concept claiming mass, bulk exploitation of two PHP vulnerabilities (CVE-2026-109618/CVE-2026-109619) to drop web shells. If functional, it lowers the bar for opportunistic mass compromise of PHP web servers, enabling webshell planting and follow-on intrusion. Defenders should patch exposed PHP stacks and hunt for webshell indicators; source is low-reliability so authenticity is unverified.Other● 55
Primer comunicado del actor que filtra datos del Estado ecuatorianoA 'first communiqué' posted by the same actor who is simultaneously publishing ECU911/Police, military, CNEL and Judicial Council databases from Ecuador. It likely states the group's motives, demands or leak schedule, which helps defenders anticipate the next victims. Content was not fully readable, so treat as context rather than confirmed intelligence.Other● 45
Reportan compromiso de Gcore a través del panel ISPsystemA hosting community thread claims Gcore, a global cloud/CDN and hosting provider, was compromised through an ISPsystem control panel. If accurate, this means attacker control over provisioning infrastructure used by many downstream customers, including regional resellers and hosted services in Latin America. The claim is unverified and undated, so treat it as a lead to validate against Gcore's own advisories rather than confirmed fact.