https://rootnotes.in/article/k0t-70000-credentials-and-the-device-mattered-more-than-the-sector Root Notes en 2026-10-26T08:03:14.974Z 70,000 credentials off exposed firewalls, and the researchers say the device mattered more than the industry https://rootnotes.in/article/nextcloud-collabora-the-flaw-fires-while-the-editor-is-stopped Root Notes en 2026-10-26T07:59:02.815Z The Nextcloud Collabora flaw fires while the editor is stopped, which is exactly what a restart does https://rootnotes.in/article/php2shell-the-numbers-count-different-things-and-one-claim-was-withdrawn Root Notes en 2026-10-26T07:07:29.066Z Unit 42 has withdrawn the only named PHP2Shell victim, and the week's biggest numbers are not counting the same thing https://rootnotes.in/article/tailworm-eleven-findings-no-cve-and-no-fix Root Notes en 2026-10-26T06:48:24.880Z A researcher published 11 Tailscale findings with no CVE and no fix. The one that matters turns an approved device into root