company
Trade publication that produced the sole source article summarising the Intel and AMD advisory round.
No evidence-backed relationships are recorded.
CVE-2026-15748 lets an unauthenticated attacker hide upload settings inside a Select field, so any site below 1.56.1 with a Select and a File Upload field is one request from a PHP file.
Reality
Hundreds of exploit attempts landed within hours of public disclosure, according to WatchTowr. With nothing to install, the controls available are network isolation, filter-layer blocking and least privilege.
Reality
The FBI is investigating how the hire happened, and SecurityWeek reports it was probably a contract job. The same roundup carried Rapid7 cutting 314 jobs under a new CEO.
Reality
A logistics contractor's intrusion stopped shipments and exposed customer delivery data at Bol, De Bijenkorf, ING and Valve. None of them were breached themselves.
Reality
Forty-two Intel advisories cover privilege escalation in Xeon, TDX and CSME/SPS, plus medium-severity bugs across a wide set of AI and ML packages. AMD's five advisories add twelve more.
Reality