https://www.threatwire.tech/news/php-critical-security-release-oct-21-two-cvss-9-2-flawsThreatWireen2026-10-20T23:55:00.000ZPHP critical security release due Oct 21: what is confirmed about the two CVSS 9.2 flaws https://www.threatwire.tech/news/fortisiem-cve-2026-106173-horizon3-public-poc-releasedThreatWireen2026-10-20T14:25:00.000ZFortiSIEM CVE-2026-106173: Horizon3 releases public PoC https://www.threatwire.tech/news/drupal-field-ui-rce-cve-2026-108097-public-lab-poc-releasedThreatWireen2026-10-20T02:53:00.000ZDrupal Field UI RCE CVE-2026-108097: public lab PoC released https://www.threatwire.tech/news/infinity-core-linux-kernel-exec-timer-bug-cve-2026-98260-has-public-root-pocThreatWireen2026-10-19T06:55:00.000ZInfinity Core: Linux kernel exec timer bug CVE-2026-98260 has a public root PoC https://www.threatwire.tech/defi/defi-hacks-september-2026-recap-post-mortemsThreatWireen2026-10-19T03:28:00.000ZDeFi hacks, September 2026: the worst month of the year, read through the post-mortems https://www.threatwire.tech/defi/symbiosis-bitcoin-bridge-46-billion-sybtc-mint-330-satoshiThreatWireen2026-10-19T03:28:00.000ZSymbiosis's Bitcoin Bridge minted 46 billion syBTC from a 25-cent deposit. Real losses were about 9.97 BTC https://www.threatwire.tech/defi/the-20000-dollar-problem-oracles-governance-votes-cheap-inputsThreatWireen2026-10-19T03:28:00.000ZThe $20,000 problem: when a protocol's input is cheaper than what it controls https://www.threatwire.tech/defi/unbacked-mints-five-incidents-same-question-liquid-near-meter-symbiosisThreatWireen2026-10-19T03:28:00.000ZUnbacked mints: five 2026 incidents, one question the code forgot to ask https://www.threatwire.tech/defi/uncx-vesting-v2-share-accounting-exploit-four-chainsThreatWireen2026-10-19T03:28:00.000ZUNCX Vesting V2 was drained on four chains. The headline said $1.49M, UNCX's own count says about $808K https://www.threatwire.tech/defi/flashloopadapter-safe-module-aave-114-eth-spoofable-caller-checkThreatWireen2026-10-19T03:20:00.000ZFlashLoopAdapter: how a spoofable caller check cost two Safe wallets 114 ETH https://www.threatwire.tech/defi/meter-passport-bridge-unbacked-mint-2-3m-september-2026ThreatWireen2026-10-19T03:20:00.000ZMeter's Passport bridge minted about $2.3M of unbacked tokens, then the chain was paused https://www.threatwire.tech/defi/neutron-governance-takeover-astroport-drop-proposal-9ThreatWireen2026-10-19T03:20:00.000ZA $20,000 vote took over Astroport and Drop on Neutron. Here is what the post-mortem says https://www.threatwire.tech/defi/payy-forged-zk-proof-bridge-exploit-1-9m-usdcThreatWireen2026-10-19T03:20:00.000ZPayy's bridge paid out $1.9M after its verifier accepted a forged proof https://www.threatwire.tech/defi/pragma-vesu-4-september-oracle-incident-47-liquidationsThreatWireen2026-10-19T03:20:00.000ZPragma's 4 September oracle error halved major prices on Starknet and set off 47 liquidations