{ "generated": "2026-11-01T08:57:41.964600+00:00", "name": "Watchfire", "site": "https://fresh-reads.lovable.app/", "feed": "https://nexlabz.github.io/watchfire-feed/", "topics": [ "npm", "pypi", "rust", "go", "ai-tools", "ci-cd", "vulns", "snare" ], "items": [ { "id": "22ceb67654e8ee2d", "title": "Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script", "url": "https://thehackernews.com/2026/11/hackers-steal-about-27-million-from.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-11-01T12:55:40+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company. Polymarket says it is refunding about $", "action": "" }, { "id": "ed75cce192b3d6fc", "title": "NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection", "url": "https://thehackernews.com/2026/11/netamloader-malware-targets-government.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-11-01T12:32:58+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Cybersecurity researchers have disclosed details of what has been described as a \"highly sophisticated infection chain\" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government ent", "action": "" }, { "id": "malware-digest-2026-11-01", "title": "1 malicious packages published on 2026-11-01 (pypi 1)", "url": "https://github.com/advisories?query=type%3Amalware", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "digest", "status": "confirmed", "published": "2026-11-01T03:30:23Z", "topics": [ "pypi" ], "severity": "info", "summary": "Including: pystr-codec", "action": "snare checks lockfiles and installs against these automatically \u2014 `snare deps`." }, { "id": "malware-digest-2026-10-31", "title": "7 malicious packages published on 2026-10-31 (pypi 5, npm 2)", "url": "https://github.com/advisories?query=type%3Amalware", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "digest", "status": "confirmed", "published": "2026-10-31T16:09:39Z", "topics": [ "npm", "pypi" ], "severity": "info", "summary": "Including: @mamans2973/maman, skills-analyzer, md-to-slides, doctreelstm, is-it-ai, multi-convert, local-commander-agent", "action": "snare checks lockfiles and installs against these automatically \u2014 `snare deps`." }, { "id": "cd2cf80431be7755", "title": "Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution", "url": "https://github.com/advisories/GHSA-4xm8-rg9h-jhq2", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-30T22:57:22Z", "topics": [ "npm", "vulns" ], "severity": "critical", "summary": "Summary Path traversal in the Signal K resources and applicationData APIs lets an unauthenticated or low-privileged user read, write and delete files outside the storage root. Reading /security.json discloses the JWT signing secret, enabling admin token forgery and remote code ex", "action": "Upgrade signalk-server to 2.34.0 or later." }, { "id": "e1698c89ebba49c9", "title": "imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution", "url": "https://github.com/advisories/GHSA-hff9-5pqw-6w9f", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-30T22:57:00Z", "topics": [ "go", "vulns" ], "severity": "critical", "summary": "Summary The ICO loader allocates data_size + BMP_FILE_HEADER_LEN bytes after reading a 32-bit attacker-controlled data_size. For data_size > UINT32_MAX - BMP_FILE_HEADER_LEN, the addition wraps before allocation. imgproxy then writes the ICO prefix and reads up to the original de", "action": "Upgrade github.com/imgproxy/imgproxy/v3 to 4.0.16 or later." }, { "id": "866d4dd666d9f173", "title": "\u201cBlack October\u201d for AI Developer Platforms", "url": "https://www.wiz.io/blog/black-october-for-ai-developer-platforms", "source": "Wiz", "source_id": "wiz", "kind": "research", "status": "confirmed", "published": "2026-10-30T22:51:44+00:00", "topics": [ "ai-tools" ], "severity": "info", "summary": "A series of agentic attacks on AI Developer Platforms has been leading to LLMJacking at scale.", "action": "" }, { "id": "b8daa8711c1dd7cf", "title": "pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI", "url": "https://github.com/advisories/GHSA-5xjx-3w67-w9x9", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-30T20:24:24Z", "topics": [ "ci-cd", "vulns" ], "severity": "critical", "summary": "Summary The [pypi-publish action][pypi-publish] versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them. [pypi-publish]: https://git", "action": "Upgrade pypa/gh-action-pypi-publish to 1.14.3 or later." }, { "id": "73225f6856d5a861", "title": "AI agent security in Kubernetes: Why prompt injection isn't the right term", "url": "https://www.aikido.dev/blog/ai-agent-security-in-kubernetes-prompt-injection", "source": "Aikido", "source_id": "aikido", "kind": "research", "status": "confirmed", "published": "2026-10-30T19:31:00+00:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "Abdel Sghiouar, Google engineer and senior cloud developer advocate, thinks prompt injection should be called prompt poisoning Category: Guides & Best Practices", "action": "" }, { "id": "malware-digest-2026-10-30", "title": "27 malicious packages published on 2026-10-30 (npm 23, pypi 4)", "url": "https://github.com/advisories?query=type%3Amalware", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "digest", "status": "confirmed", "published": "2026-10-30T18:06:15Z", "topics": [ "npm", "pypi" ], "severity": "info", "summary": "Including: @pcb-dp/qa-commons, @sxm-content-creators/tools-ds, vas-tops2-reportingui, vas-tops2-core-clients-search, vas-tops2-core-client-cleanup-ui, @tops2/digital-assistant-ui, vas-tops2-core-property-search, vas-tops2-digital-assistant-ui\u2026", "action": "snare checks lockfiles and installs against these automatically \u2014 `snare deps`." }, { "id": "222bb1cb62f7d340", "title": "Threat Researcher\u2019s Notebook: How Attackers Redirect Crypto Payments", "url": "https://www.reversinglabs.com/blog/threat-researchers-notebook-how-attackers-redirect-crypto-payments", "source": "ReversingLabs", "source_id": "reversinglabs", "kind": "research", "status": "confirmed", "published": "2026-10-30T17:00:00+00:00", "topics": [ "vulns" ], "severity": "high", "summary": "This blog discusses the general trend of Clipbanker malware, why they can be successful, what specific samples look like, and how to avoid them.", "action": "" }, { "id": "f98c69bf43c7c459", "title": "Malicious Claude Code extension on Cursor planted SSH backdoors", "url": "https://www.bleepingcomputer.com/news/security/malicious-claude-code-extension-on-cursor-planted-ssh-backdoors/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-30T10:36:54-04:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. [...]", "action": "" }, { "id": "d2279e40591fcdfc", "title": "Actively exploited: Ivanti Connect Secure (CVE-2026-118527)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118527", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-30T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "dbc092ac98830251", "title": "Actively exploited: Ivanti Connect Secure (CVE-2026-111357)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111357", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-30T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "a376c6814de942a8", "title": "Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines", "url": "https://www.stepsecurity.io/blog/claude-code-extension-trojanized", "source": "StepSecurity", "source_id": "stepsecurity", "kind": "research", "status": "confirmed", "published": "2026-10-30T10:12:18+00:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "On October 29, 2026, version 2.1.313 of the official Claude Code VS Code extension, anthropic.claude-code, was published with a malicious loader embedded in its extension.js bundle. The version was distributed through the Open-VSX registry and Cursor's extension marketplace, whic", "action": "" }, { "id": "e8f44af938328989", "title": "Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace", "url": "https://socket.dev/blog/claude-code-extension-compromise?utm_medium=feed", "source": "Socket", "source_id": "socket", "kind": "research", "status": "confirmed", "published": "2026-10-30T09:26:06.050000+00:00", "topics": [ "ai-tools" ], "severity": "info", "summary": "Cursor removed a malicious Claude Code 2.1.313 extension from its marketplace. Socket examines registry records and the initial claims about its distribution.", "action": "" }, { "id": "90688d3151e2bf62", "title": "Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor", "url": "https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-30T14:25:47+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "Cybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on affected systems. The malicious update, versi", "action": "" }, { "id": "e8ad629591f0f245", "title": "CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV", "url": "https://thehackernews.com/2026/10/cisa-adds-actively-exploited-gitlab-rce.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-30T12:57:05+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-97229 (C", "action": "" }, { "id": "malware-digest-2026-10-29", "title": "43 malicious packages published on 2026-10-29 (npm 40, pypi 3)", "url": "https://github.com/advisories?query=type%3Amalware", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "digest", "status": "confirmed", "published": "2026-10-29T22:14:17Z", "topics": [ "npm", "pypi" ], "severity": "info", "summary": "Including: dowload_ebok_lolita_by_vladimir_nabokov_oy1gy, dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llc, dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t, dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p, dowload_ebok_armageddon_by_max_hastings_kv3s4, bq-helix-recon-6ade983e, bq-helix-build-hook-6ade983e, orderbook-volt-plugin\u2026", "action": "snare checks lockfiles and installs against these automatically \u2014 `snare deps`." }, { "id": "ba3cd3eac5a72f80", "title": "Hugging Face malware campaign returns to hijack GPUs for crypto mining", "url": "https://www.bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-29T18:09:24-04:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a ", "action": "" }, { "id": "866051d5fbe61a61", "title": "Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware", "url": "https://www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-29T14:38:26-04:00", "topics": [ "vulns" ], "severity": "high", "summary": "A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift. [...]", "action": "" }, { "id": "7447e5f3d2cb5cee", "title": "Chrome extensions with 13.4 million installs caught hijacking searches", "url": "https://www.bleepingcomputer.com/news/security/chrome-extensions-with-134-million-installs-caught-hijacking-searches/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-29T12:10:31-04:00", "topics": [ "vulns" ], "severity": "high", "summary": "A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users' searches through tracking servers to generate advertising revenue from Bing and Yahoo. [...]", "action": "" }, { "id": "9c56a02321bc491f", "title": "Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners", "url": "https://thehackernews.com/2026/10/fake-chatgpt-and-claude-apps-abuse.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-29T20:50:29+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim ", "action": "" }, { "id": "4fbf402056f0c476", "title": "The Rise of Agentic Attacks: What They Look Like, and Where They're Headed", "url": "https://www.wiz.io/blog/the-rise-of-agentic-attacks", "source": "Wiz", "source_id": "wiz", "kind": "research", "status": "confirmed", "published": "2026-10-29T14:26:22+00:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "AI agents are changing how attackers operate. Explore real-world cases of agentic attacks, learn how to identify their fingerprints, and discover what they mean for the future of cybersecurity.", "action": "" }, { "id": "814231d212d37a17", "title": "3 Ways AI Agents Already Operate in Your Browser", "url": "https://www.bleepingcomputer.com/news/security/3-ways-ai-agents-already-operate-in-your-browser/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-29T10:00:10-04:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "AI agents can control authenticated browsers, interact with corporate applications, and access sensitive data while appearing to act as legitimate employees. Keep Aware examines three ways agents operate inside browsers and why traditional security tools may struggle to distingui", "action": "" }, { "id": "6a6b9dc45f9e8cb7", "title": "Actively exploited: GitLab Community Edition and Enterprise Edition (CVE-2026-97229)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97229", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-29T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient ", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "d70528cb55377fb4", "title": "Actively exploited: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (CVE-2026-76418)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76418", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-29T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) co", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "2813eb71c29272d4", "title": "New Cisco firewall zero-day exploited to crash SSL VPN devices", "url": "https://www.bleepingcomputer.com/news/security/cisco-warns-of-firewall-zero-day-exploited-to-crash-ssl-vpn-devices/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-29T07:10:13-04:00", "topics": [ "vulns" ], "severity": "high", "summary": "Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that attackers are exploiting to remotely crash vulnerable firewall devices. [...]", "action": "" }, { "id": "72e13e190054f7a9", "title": "Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls", "url": "https://thehackernews.com/2026/10/cisco-patches-actively-exploited-asa.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-29T16:14:46+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-76418, is rated ", "action": "" }, { "id": "d282bc7cb5d66e47", "title": "GitHub Launches npm Firewall to Block Malicious Packages Before Installation", "url": "https://thehackernews.com/2026/10/github-launches-npm-firewall-to-block.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-29T15:56:33+05:30", "topics": [ "npm" ], "severity": "high", "summary": "GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. \"The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time", "action": "" }, { "id": "430f7914607482b3", "title": "Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys", "url": "https://thehackernews.com/2026/10/hackers-exploited-cisco-sd-wan-flaw-to.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-29T13:54:22+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them for l", "action": "" }, { "id": "7ab67924bae5bc4a", "title": "China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility", "url": "https://thehackernews.com/2026/10/china-linked-hackers-exploited-vmware.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-29T11:52:33+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Wa", "action": "" }, { "id": "af5cad61947e0a6a", "title": "Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users", "url": "https://socket.dev/blog/searchjacked?utm_medium=feed", "source": "Socket", "source_id": "socket", "kind": "research", "status": "confirmed", "published": "2026-10-29T02:01:54.540000+00:00", "topics": [ "vulns" ], "severity": "high", "summary": "319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.", "action": "" }, { "id": "0248309e4dc5c583", "title": "Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder", "url": "https://securitylabs.datadoghq.com/articles/node2shell-cve-2026-111497-nodejs-brotli-decoder/", "source": "Datadog Security Labs", "source_id": "datadog", "kind": "research", "status": "confirmed", "published": "2026-10-29T00:00:00+00:00", "topics": [ "npm", "vulns" ], "severity": "info", "summary": "We reproduced CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js and other runtimes, and explain how to detect and remediate it.", "action": "" }, { "id": "malware-digest-2026-10-28", "title": "21 malicious packages published on 2026-10-28 (npm 20, pypi 1)", "url": "https://github.com/advisories?query=type%3Amalware", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "digest", "status": "confirmed", "published": "2026-10-28T23:16:46Z", "topics": [ "npm", "pypi" ], "severity": "info", "summary": "Including: b20miner, @zaip-ai/cli, black-spindle, itsa-utils, itsa-react-checkbox, @walknpm/todo-cli, dsh-plugin-blender-3d, mock-transactions-sdk\u2026", "action": "snare checks lockfiles and installs against these automatically \u2014 `snare deps`." }, { "id": "db6440d0114c0792", "title": "Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it", "url": "https://github.com/advisories/GHSA-6jp4-8v48-cc5v", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-28T21:23:44Z", "topics": [ "pypi", "vulns" ], "severity": "critical", "summary": "Summary The main Electrum server the client connects to is trusted with mempool (\"unconfirmed\") transactions. This is documented design. [0] However now someone figured out a way to practically exploit it: - when the client broadcasts a new tx1, a malicious server can swallow it,", "action": "Upgrade electrum to 4.8.3 or later." }, { "id": "9b6feff8c4ed6b6f", "title": "Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm br_table instruction", "url": "https://github.com/advisories/GHSA-mghf-wjfp-p5xm", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-28T21:14:14Z", "topics": [ "rust", "vulns" ], "severity": "critical", "summary": "Summary When running with the Cranelift compiler backend on an aarch64 target, Wasmtime can compile a Wasm module with more than ~256k targets on one br_table instruction in a way that results in an incorrect conditional branch target. This conditional branch could then jump to a", "action": "Upgrade wasmtime to 36.0.19 or later." }, { "id": "fb59cb7f9aa5190e", "title": "zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE", "url": "https://github.com/advisories/GHSA-m665-v7pm-7grj", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-28T21:09:50Z", "topics": [ "rust", "vulns" ], "severity": "critical", "summary": "Summary A critical architectural parser differential exists in the zip crate ( (&mut self, file: &mut ZipFile ) -> ZipResult { file.safe_prepare_path(&self.outpath, &mut outpath, None:: bool)>)?; let mut outfile = fs::File::create(&outpath)?; io::copy(file, &mut outfile)?; Ok(())", "action": "Upgrade zip to 9.0.5 or later." }, { "id": "786b77ad2418a32f", "title": "Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns", "url": "https://thehackernews.com/2026/10/volt-typhoon-used-covert-silent-train.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-28T23:38:33+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. \"First identified in late 2023, Silent Train uses rotating chains ", "action": "" }, { "id": "a3232c7a99347bd1", "title": "Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.", "url": "https://thehackernews.com/2026/10/google-to-allow-one-tap-android-app.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-28T22:38:09+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full catalog, along with every", "action": "" }, { "id": "8ff41c680a1efbd3", "title": "Volt Typhoon hides zero-day attacks using 'Silent Train' framework", "url": "https://www.bleepingcomputer.com/news/security/volt-typhoon-hides-zero-day-attacks-using-silent-train-framework/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-28T12:00:00-04:00", "topics": [ "vulns" ], "severity": "high", "summary": "Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]", "action": "" }, { "id": "6b6cdecdf371b268", "title": "Even after PHP2Shell, blast radius matters more than a CVSS score", "url": "https://www.bleepingcomputer.com/news/security/even-after-php2shell-blast-radius-matters-more-than-a-cvss-score/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-28T09:50:59-04:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the dam", "action": "" }, { "id": "cb116937801ebf97", "title": "Actively exploited: Broadcom VMware ESX (CVE-2026-41709)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41709", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-28T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "b318c5e919de6962", "title": "Actively exploited: Linux Kernel (CVE-2026-46300)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-28T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fra", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "22b50db7ba9b16c9", "title": "Aikido launches external network pentesting", "url": "https://www.aikido.dev/blog/aikido-launches-external-network-pentesting", "source": "Aikido", "source_id": "aikido", "kind": "research", "status": "confirmed", "published": "2026-10-28T10:00:00+00:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "Aikido launches external network pentesting: AI agents attack your internet-facing systems from the outside and report only findings they actually exploit. Category: Company Updates", "action": "" }, { "id": "e844a788d9dbb27e", "title": "ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws", "url": "https://thehackernews.com/2026/10/shinyhunters-exploited-oracle.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-28T11:34:58+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request ", "action": "" }, { "id": "malware-digest-2026-10-27", "title": "27 malicious packages published on 2026-10-27 (npm 25, pypi 2)", "url": "https://github.com/advisories?query=type%3Amalware", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "digest", "status": "confirmed", "published": "2026-10-27T23:04:33Z", "topics": [ "npm", "pypi" ], "severity": "info", "summary": "Including: csec-form-validatorr, ccsseecc-form-validator, ccsseecc-crypto-toolkit, ccsec-crypto-toolkit, ccsec-form-validator, csec-crypto-toolkit, csec-form-validator, agentenact\u2026", "action": "snare checks lockfiles and installs against these automatically \u2014 `snare deps`." }, { "id": "6e6fe438e5786007", "title": "MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules", "url": "https://github.com/advisories/GHSA-26p8-2jq9-3vq9", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-27T21:26:32Z", "topics": [ "pypi", "vulns" ], "severity": "critical", "summary": "Summary MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. During scorer deserialization, the server accepts a request-controlled Python module path beneath one of four allowed package prefixes, imports that module, obtains a ", "action": "Upgrade mlflow to 3.17.0 or later." }, { "id": "4835c3a6eab4506f", "title": "Hackers hijack Convertr analytics script to steal payment card data", "url": "https://www.bleepingcomputer.com/news/security/hackers-hijack-convertr-analytics-script-to-steal-payment-card-data/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-27T16:57:25-04:00", "topics": [ "vulns" ], "severity": "high", "summary": "A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout. [...]", "action": "" }, { "id": "b0c9b44aa0625bf7", "title": "CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets", "url": "https://thehackernews.com/2026/10/cyberstrikeai-uses-44-ai-agents-to.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-27T23:56:46+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments us", "action": "" }, { "id": "afa741ff67f996e3", "title": "Warp discloses breach exposing AI agent logs, user telemetry data", "url": "https://www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-27T12:15:39-04:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure. [...]", "action": "" }, { "id": "d108bfb74ace1ff9", "title": "better-auth: OAuth state can be used as a Magic Link to sign in as another user", "url": "https://github.com/advisories/GHSA-965c-763c-88jm", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-27T15:32:05Z", "topics": [ "npm", "vulns" ], "severity": "critical", "summary": "Am I affected? You may be affected if you use better-auth from 1.4.0-beta.18 through versions before 1.7.7 with the Magic Link plugin and social or Generic OAuth sign-in. You are affected if all of these are true: - Magic Link is enabled with default storeToken: \"plain\", or with ", "action": "Upgrade better-auth to 1.7.7 or later." }, { "id": "8dfecbe7bc8ba1ca", "title": "Authlib: empty signatures validation in JWS JSON deserialization", "url": "https://github.com/advisories/GHSA-6v38-4h7w-rj9h", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-27T14:50:18Z", "topics": [ "pypi", "vulns" ], "severity": "critical", "summary": "Authlib (prior to 1.9.0) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and without requiring a crypto", "action": "Upgrade authlib to 1.9.0 or later." }, { "id": "adf8b8bb6efab933", "title": "Agno: Arbitrary code execution via eval() on field_type in FunctionCall", "url": "https://github.com/advisories/GHSA-m4w4-3r8h-jw98", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-27T13:30:41Z", "topics": [ "pypi", "vulns" ], "severity": "critical", "summary": "Impact Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component. The field_type parameter on a FunctionCall input field was passed to Python's built-in eval(), allowing an attacker who could influence that value to execute a", "action": "Upgrade agno to 2.3.24 or later." }, { "id": "d38040e0ef4b6cc2", "title": "MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)", "url": "https://github.com/advisories/GHSA-6hp3-vr39-rqw8", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-27T13:30:10Z", "topics": [ "pypi", "vulns" ], "severity": "critical", "summary": "Summary An unauthenticated remote attacker can crash a running MONAILabel server or silently corrupt its medical AI inference results by uploading a single crafted DICOM file (~132 KB) via the REST API. The vulnerability stems from pydicom's lack of validation for Decimal String ", "action": "Upgrade monai to 1.6.1 or later." }, { "id": "cce5d2da15c38203", "title": "Actively exploited: Adobe Commerce and Magento (CVE-2026-48356)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48356", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-27T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "530c9bb270879ff2", "title": "Actively exploited: Google Brotli (CVE-2026-111497)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111497", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-27T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compr", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "7ad038240c5a22da", "title": "AI-Generated Fake Login Pages Are Making Account Takeovers Easier", "url": "https://thehackernews.com/2026/10/ai-generated-fake-login-pages-are.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-27T17:02:46+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can recreate familiar login screens, impersonate trusted brands and tailor phishing attempts to specific employees or organizations. Some fake login pages go beyond s", "action": "" }, { "id": "d506c1a201741da2", "title": "Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption", "url": "https://thehackernews.com/2026/10/lazarus-abuses-south-korean-security.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-27T17:02:31+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russia", "action": "" }, { "id": "f2ed444d9d8428ac", "title": "StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines", "url": "https://www.stepsecurity.io/blog/stepsecurity-now-inventories-ai-agent-plugins-in-your-github-repositories-and-on-developer-machines", "source": "StepSecurity", "source_id": "stepsecurity", "kind": "research", "status": "confirmed", "published": "2026-10-27T11:23:27+00:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "Inventory the Claude Code and Codex plugins on developer machines and in your GitHub repositories: where each came from, what it bundles, whether it is enabled, and which repositories distribute it.", "action": "" }, { "id": "de5769c04b886d25", "title": "Apple backports CoreGraphics zero-day patches to older iPhones", "url": "https://www.bleepingcomputer.com/news/apple/apple-backports-coregraphics-zero-day-patches-to-older-iphones/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-27T06:36:12-04:00", "topics": [ "vulns" ], "severity": "high", "summary": "\u200bApple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in \"extremely sophisticated\" targeted attacks on iOS devices. [...]", "action": "" }, { "id": "a5fedcd17b8e7de4", "title": "Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers", "url": "https://thehackernews.com/2026/10/australia-gets-into-amadey-malware.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-27T15:03:06+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators gained access to the criminal's operation's backend and cut ", "action": "" }, { "id": "3dce457a2dc2b80a", "title": "CISA confirms PHP2Shell vulnerabilities now exploited in attacks", "url": "https://www.bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-27T04:20:54-04:00", "topics": [ "vulns" ], "severity": "high", "summary": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]", "action": "" }, { "id": "201c3cf322505c5f", "title": "Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses", "url": "https://thehackernews.com/2026/10/attackers-hijack-dahua-ip-cameras-in.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-27T12:04:47+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. \"Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration a", "action": "" }, { "id": "c9dfe8552bd65f7f", "title": "How to patch PHP2Shell with free Aikido Images", "url": "https://www.aikido.dev/blog/how-to-patch-php2shell-with-free-aikido-images", "source": "Aikido", "source_id": "aikido", "kind": "research", "status": "confirmed", "published": "2026-10-26T22:15:00+00:00", "topics": [ "vulns" ], "severity": "info", "summary": "Patch PHP2Shell (CVE-2026-109618 and CVE-2026-109619) with free Aikido Images for PHP 5.5 to 8.5. Stay on your current version with backported fixes. Category: Product Updates", "action": "" }, { "id": "45e1feb1e77b1c31", "title": "Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected", "url": "https://socket.dev/blog/threat-intel-campaign-impact?utm_medium=feed", "source": "Socket", "source_id": "socket", "kind": "research", "status": "confirmed", "published": "2026-10-26T22:14:49.698000+00:00", "topics": [ "vulns" ], "severity": "high", "summary": "Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.", "action": "" }, { "id": "c0fb63b7a262b30a", "title": "OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing", "url": "https://www.bleepingcomputer.com/news/artificial-intelligence/openai-launches-gpt-61-terra-with-3x-faster-ai-agents-50-percent-lower-pricing/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-26T16:46:49-04:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than its larger models. [...]", "action": "" }, { "id": "malware-digest-2026-10-26", "title": "53 malicious packages published on 2026-10-26 (npm 47, pypi 6)", "url": "https://github.com/advisories?query=type%3Amalware", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "digest", "status": "confirmed", "published": "2026-10-26T20:42:32Z", "topics": [ "npm", "pypi" ], "severity": "info", "summary": "Including: ctf-agent, @iobandamwer/native-helper, path-stream-utils-testmetest, @sxm-web/client-sdk-core, @greenlake/mfe-login-url, @ppa-web-components/ppa-banner, @drone-js-ext/core, @greenlake/context-pane\u2026", "action": "snare checks lockfiles and installs against these automatically \u2014 `snare deps`." }, { "id": "39585b9bd73373a9", "title": "Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware", "url": "https://thehackernews.com/2026/10/attackers-use-microsoft-teams-it.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-26T21:22:40+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Cybersecurity researchers are calling attention to what they say is a \"recurring social engineering pattern\" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation scams or to deliver malware. \"A consistent pat", "action": "" }, { "id": "f04c03a3543f6bbe", "title": "\u26a1 Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More", "url": "https://thehackernews.com/2026/10/weekly-recap-this2shell-that2shell.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-26T19:36:13+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent p", "action": "" }, { "id": "c97e165df77c8891", "title": "When an AI Agent Is the Incident, the Identity Record Is the Evidence", "url": "https://www.bleepingcomputer.com/news/security/when-an-ai-agent-is-the-incident-the-identity-record-is-the-evidence/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-26T10:00:10-04:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "A new NIST, CISA, and NSA guide treats runaway agents as incidents to be rehearsed. The hard part of the response is answering whose authority the agent used, and that answer has to exist before the incident does. [...]", "action": "" }, { "id": "f10a91fc0c0db1e1", "title": "The Pwn Request Reckoning: What Still Works Against GitHub Actions", "url": "https://www.wiz.io/blog/github-actions-security-pwn-request-reckoning", "source": "Wiz", "source_id": "wiz", "kind": "research", "status": "confirmed", "published": "2026-10-26T13:24:12+00:00", "topics": [ "ci-cd" ], "severity": "info", "summary": "GitHub's 2026 Actions changes make pull_request_target attacks harder, but not impossible. Here's the residual attack surface and how to audit for it.", "action": "" }, { "id": "a46ae7f35048f835", "title": "Actively exploited: PHP Group PHP (CVE-2026-109618)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109618", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-26T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "99f82d9c47d49a27", "title": "Actively exploited: PHP Group PHP (CVE-2026-109619)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109619", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-26T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "56b2abf328629d15", "title": "uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts", "url": "https://thehackernews.com/2026/10/ucreator-android-spyware-can-steal.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-26T15:24:02+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who r", "action": "" }, { "id": "9b47e941f5afe803", "title": "Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware", "url": "https://thehackernews.com/2026/10/malicious-file-in-downloads-folder.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-26T11:33:48+05:30", "topics": [ "npm", "ai-tools" ], "severity": "high", "summary": "A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and s", "action": "" }, { "id": "malware-digest-2026-10-25", "title": "15 malicious packages published on 2026-10-25 (npm 13, pypi 2)", "url": "https://github.com/advisories?query=type%3Amalware", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "digest", "status": "confirmed", "published": "2026-10-25T21:30:24Z", "topics": [ "npm", "pypi" ], "severity": "info", "summary": "Including: nebulallm, @capsense/core-ui, zagents-message-bus, event-bus-lite-testmetest, @capsense/ccx-welcome-page, w-mousekey, @ppa-web-components/ppa-hotel-collection, @ppa-web-components/ppa-headerfooter\u2026", "action": "snare checks lockfiles and installs against these automatically \u2014 `snare deps`." }, { "id": "92c53c26133c7edc", "title": "AI coding agents hijacked using AGENTS.md file in Downloads folder", "url": "https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-25T11:49:38-04:00", "topics": [ "npm", "ai-tools" ], "severity": "high", "summary": "Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...]", "action": "" }, { "id": "c2e94c57293554e3", "title": "Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability", "url": "https://www.wiz.io/blog/cve-2026-111497-brotli-rce-node-js", "source": "Wiz", "source_id": "wiz", "kind": "research", "status": "confirmed", "published": "2026-10-25T14:46:53+00:00", "topics": [ "vulns" ], "severity": "info", "summary": "Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.", "action": "" }, { "id": "2638dbd58d4d3ff2", "title": "snare v1.6.0 released \u2014 known-malicious packages in every ecosystem", "url": "https://github.com/nexlabz/snare/releases/tag/v1.6.0", "source": "snare", "source_id": "snare", "kind": "release", "status": "confirmed", "published": "2026-10-25T13:15:12Z", "topics": [ "snare" ], "severity": "info", "summary": "snare now knows which package versions are malware, for npm, Python, Rust, Go and more, and stops them before they install. Supply-chain malware isn't only an npm problem anymore. This month, LiteLLM's release pipeline was hijacked, and version 1.107.0 on PyPI shipped a file that", "action": "Update: `snare update`." }, { "id": "f6239a8ec739144e", "title": "OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication", "url": "https://thehackernews.com/2026/10/openai-ai-agents-demonstrate-vm-escapes.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-25T12:24:29+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. \"Based on the current state of alignment research, monitoring systems, and the sec", "action": "" }, { "id": "malware-digest-2026-10-24", "title": "4 malicious packages published on 2026-10-24 (npm 4)", "url": "https://github.com/advisories?query=type%3Amalware", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "digest", "status": "confirmed", "published": "2026-10-24T23:55:21Z", "topics": [ "npm" ], "severity": "info", "summary": "Including: noelc-css-blender, tailwindcss-theme-kit, overarch-windows-x64-yr, @liauto/win32-x64", "action": "snare checks lockfiles and installs against these automatically \u2014 `snare deps`." }, { "id": "141f2b09d37cce25", "title": "OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found", "url": "https://www.stepsecurity.io/blog/ovhcloud-cli-github-release-swap-glassworm", "source": "StepSecurity", "source_id": "stepsecurity", "kind": "research", "status": "confirmed", "published": "2026-10-24T16:21:08+00:00", "topics": [ "vulns" ], "severity": "high", "summary": "An attacker swapped the binaries on five OVHcloud CLI releases, stayed live for 94 minutes, and deleted the evidence. We rebuilt the exact attacker build, recovered the GlassWorm loader from an orphaned commit, and detonated the full chain in an isolated chamber. The replay shows", "action": "" }, { "id": "137532b55ad09e56", "title": "Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline", "url": "https://thehackernews.com/2026/10/leaked-litellm-master-key-let-attackers.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-24T16:33:33+05:30", "topics": [ "pypi", "ci-cd" ], "severity": "high", "summary": "LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. \"On May 27, 2026, a configuration file was committed t", "action": "" }, { "id": "1096e92c65aad859", "title": "CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud", "url": "https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-24T11:55:57+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the ", "action": "" }, { "id": "malware-digest-2026-10-23", "title": "44 malicious packages published on 2026-10-23 (pypi 25, npm 19)", "url": "https://github.com/advisories?query=type%3Amalware", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "digest", "status": "confirmed", "published": "2026-10-23T22:05:57Z", "topics": [ "npm", "pypi" ], "severity": "info", "summary": "Including: @k18k/entrypoint-sdk-darwin-arm64, orqiva-runtime-win32-x64, @k18k/entrypoint-sdk-linux-x64, @k18k/entrypoint-sdk-darwin-x64, taskquay, workslip, runpier, thornqueue\u2026", "action": "snare checks lockfiles and installs against these automatically \u2014 `snare deps`." }, { "id": "53ba0e8cdeceaeaa", "title": "Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation", "url": "https://github.com/advisories/GHSA-897f-g5gm-fmxm", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-23T22:02:20Z", "topics": [ "rust", "vulns" ], "severity": "critical", "summary": "Summary In Wasmtime prior to v43, the Cranelift compiler backend bit-packs its SSA value indices in a way that can result in silent overflow in release builds, and result in incorrect value references in the IR resulting in arbitrary miscompilation. A very large Wasm function bod", "action": "Upgrade wasmtime to 36.0.19 or later." }, { "id": "81e2bf714d0eb6ce", "title": "Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution", "url": "https://github.com/advisories/GHSA-5x8w-8jj5-q52h", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-23T21:55:21Z", "topics": [ "pypi", "vulns" ], "severity": "critical", "summary": "Credits Researcher: Alex Bouffard (mixbo@pebwalker.com) Summary A heap buffer overflow in Pillow's FlashPix (FPX) JPEG-tile decoder lets an attacker achieve arbitrary code execution by getting an application to open a single crafted file with Image.open(). The file is recognized ", "action": "Upgrade pillow to 13.0.0 or later." }, { "id": "e5e69230f8396214", "title": "Laravel TokenGuard authentication bypass through non-string API credentials", "url": "https://github.com/advisories/GHSA-f9x3-7vq9-cph6", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-23T21:50:27Z", "topics": [ "vulns" ], "severity": "critical", "summary": "Laravel's built-in TokenGuard, when configured with a standard token-based API guard, may be bypassed to authenticate as an arbitrary existing user without knowledge of their valid API token. Under certain database configurations (MySQL/MariaDB) an attacker can submit a specially", "action": "Upgrade laravel/framework to 13.29.0 or later." }, { "id": "2d0b1d9233b727ab", "title": "New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack", "url": "https://socket.dev/blog/litellm-attack-timeline?utm_medium=feed", "source": "Socket", "source_id": "socket", "kind": "research", "status": "confirmed", "published": "2026-10-23T21:00:31.470000+00:00", "topics": [ "pypi" ], "severity": "high", "summary": "Socket uncovered secret-stealing workflows that ran in LiteLLM\u2019s GitHub repository 11 days before the supply chain attack on PyPI and Docker.", "action": "" }, { "id": "f80b9c9527fb867a", "title": "Abandoned Popcorn Time app exposed millions of devices to RCE attacks", "url": "https://www.bleepingcomputer.com/news/security/abandoned-popcorn-time-app-exposed-millions-of-device-to-rce-attacks/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-23T16:55:05-04:00", "topics": [ "vulns" ], "severity": "high", "summary": "Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. [...]", "action": "" }, { "id": "44a9dce2c41f3986", "title": "Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls", "url": "https://github.com/advisories/GHSA-cxf3-9h37-7rr8", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-23T20:49:37Z", "topics": [ "go", "vulns" ], "severity": "critical", "summary": "Impact Echo's Proxy middleware selected a raw tunnel when the client requested a WebSocket upgrade, before validating whether the configured upstream accepted it. If the upstream returned an ordinary HTTP response and kept the connection alive, subsequent HTTP requests on that co", "action": "Upgrade github.com/labstack/echo/v4 to 4.16.1 or later." }, { "id": "185b8cbaff59aecb", "title": "Node2Shell evolves to HTTP2Shell. Brotli flaw (CVE-2026-111497) blast radius affects many libraries & apps using HTTPs.", "url": "https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497", "source": "Aikido", "source_id": "aikido", "kind": "research", "status": "confirmed", "published": "2026-10-23T20:45:00+00:00", "topics": [ "vulns" ], "severity": "info", "summary": "The Brotli flaw behind Node2Shell (CVE-2026-111497) affects many libraries and applications using HTTP with Brotli or brotlicffi installed. Check your versions and upgrade to the fix. Category: Vulnerabilities & Threats", "action": "" }, { "id": "f3f0f8bf6aa215f9", "title": "obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopback", "url": "https://github.com/advisories/GHSA-pqh8-4pj7-32xx", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-23T18:29:02Z", "topics": [ "npm", "vulns" ], "severity": "critical", "summary": "Impact The Streamable HTTP transport was constructed without enableDnsRebindingProtection/allowedHosts/allowedOrigins and performed no Origin-header validation. With the documented auth.mode: \"none\" loopback default, a drive-by web page could POST http://127.0.0.1/mcp and receive", "action": "Upgrade obsidian-tc to 1.3.1 or later." }, { "id": "03e531d5d591b16e", "title": "Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions", "url": "https://thehackernews.com/2026/10/exposed-infrastructure-reveals-how.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-23T23:20:47+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an \"Autonomous Red Team Kill Chain Framework\" referred to as Phantom. The threat acto", "action": "" }, { "id": "e2c9516ba8106464", "title": "obsidian-tc tokens can access arbitrary configured vaults", "url": "https://github.com/advisories/GHSA-84c9-qqpq-2pq5", "source": "GitHub Advisory Database", "source_id": "ghsa", "kind": "advisory", "status": "confirmed", "published": "2026-10-23T17:29:17Z", "topics": [ "npm", "vulns" ], "severity": "critical", "summary": "Impact Tool dispatch did not check the caller-supplied input.vault against the caller's bound vault (ctx.vaultId); the folder ACL was a single global instance and the JWT carried no vault claim. As a result, any valid token could read, write, or delete any configured vault by pas", "action": "Upgrade obsidian-tc to 1.3.1 or later." }, { "id": "5f6d686ed2d4a1c8", "title": "You gave your AI agent access, but who is giving it orders?", "url": "https://www.bleepingcomputer.com/news/security/you-gave-your-ai-agent-access-but-who-is-giving-it-orders/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-23T10:00:10-04:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or deleting files using their legitimate permissions. Gen Digital explains how its Agent Trust Hub helps protect agents through skill verification, secure connecti", "action": "" }, { "id": "0593de87995b0ff6", "title": "Actively exploited: Arista VeloCloud Orchestrator (CVE-2026-114625)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-23T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orches", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "28b2962adb1fcfa7", "title": "Actively exploited: Collabora Collabora Online \u2013 Built-in CODE Server (CVE-2026-110447)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-23T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Collabora Collabora Online \u2013 Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "385065abf80ed16d", "title": "Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack", "url": "https://thehackernews.com/2026/10/russian-linked-hackers-used-new-mesh.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-23T16:41:23+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved UAC-0099 (aka Earth Sirrush) obtaining initial access to the t", "action": "" }, { "id": "94c81b70f83f62c5", "title": "Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents\u2019 Token Balances", "url": "https://thehackernews.com/2026/10/critical-x402-sdk-flaw-could-let.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-23T14:05:45+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs' default client, which set no spending limit until releases on August 1", "action": "" }, { "id": "551bdd5bfaf5a1e8", "title": "PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware", "url": "https://thehackernews.com/2026/10/php2shell-exploit-attempts-hit-millions.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-23T13:10:45+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The attacks a", "action": "" }, { "id": "2762aabcf0cba475", "title": "eMudhra / emSign CA Compromise: What Python, pip, and CI/CD Users Need to Update", "url": "https://www.stepsecurity.io/blog/emudhra-emsign-ca-compromise-python-pip-ci-cd-update", "source": "StepSecurity", "source_id": "stepsecurity", "kind": "research", "status": "confirmed", "published": "2026-10-22T19:49:42+00:00", "topics": [ "pypi", "ci-cd" ], "severity": "info", "summary": "Compromised eMudhra intermediate CA keys put Python dependency downloads at risk. Here are the affected tools, verified certificate-trust results, and remediation steps for pip, uv, virtual environments, and CI/CD images.", "action": "" }, { "id": "5a6bf9a2d68f29c8", "title": "LiteLLM release pipeline hacked to distribute info-stealer malware", "url": "https://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-22T15:12:51-04:00", "topics": [ "pypi", "ci-cd" ], "severity": "high", "summary": "Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]", "action": "" }, { "id": "b9c1e3e96f9a4e89", "title": "The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat", "url": "https://thehackernews.com/2026/10/the-ai-agent-nobody-owns-watch-expert.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-23T00:35:35+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns it. If an employee had that much reach w", "action": "" }, { "id": "1bd1053dc35f65bf", "title": "Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks", "url": "https://thehackernews.com/2026/10/arista-warns-of-critical-velocloud-sql.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-23T00:35:17+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-o", "action": "" }, { "id": "11648cd58d5cd0dc", "title": "Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)", "url": "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497", "source": "Aikido", "source_id": "aikido", "kind": "research", "status": "confirmed", "published": "2026-10-22T18:11:00+00:00", "topics": [ "npm", "vulns" ], "severity": "info", "summary": "Node.js CVE-2026-111497 (Node2Shell) is a Brotli flaw that can allow remote code execution. See who is affected, patched versions and the fix. Category: Vulnerabilities & Threats", "action": "" }, { "id": "1a0681eeb53f6c23", "title": "ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More", "url": "https://thehackernews.com/2026/10/threatsday-ai-secrets-leak-pingcap.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-22T23:15:44+05:30", "topics": [ "npm", "pypi", "vulns" ], "severity": "high", "summary": "This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. A", "action": "" }, { "id": "cc32171376d45d00", "title": "Arista patches new VeloCloud Orchestrator zero-day exploited in attacks", "url": "https://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/", "source": "BleepingComputer", "source_id": "bleeping", "kind": "news", "status": "reported", "published": "2026-10-22T13:18:22-04:00", "topics": [ "vulns" ], "severity": "high", "summary": "Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. [...]", "action": "" }, { "id": "ffc4f7fb0cd497c6", "title": "ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors", "url": "https://www.wiz.io/blog/artex-in-the-wild-storm-0940-expands-targeting-of-it-and-software-vendors", "source": "Wiz", "source_id": "wiz", "kind": "research", "status": "confirmed", "published": "2026-10-22T13:05:31+00:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "Wiz Research is tracking an ARTEX-using actor, overlapping with Storm-0940, across multiple targeted software vendors. Learn how the AI agent attacks Okta, Entra, and Cognito, and what it left behind in the logs.", "action": "" }, { "id": "4b0824b45226c4b1", "title": "OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL", "url": "https://thehackernews.com/2026/10/opencode-flaw-lets-malicious-mcp.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-22T16:14:05+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) servers to add outside tools, and such code would run with the dev", "action": "" }, { "id": "fef19f847a8f9e02", "title": "litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader", "url": "https://www.stepsecurity.io/blog/litellm-1-107-0-compromised-pypi-backdoored-wheels-credential-stealer", "source": "StepSecurity", "source_id": "stepsecurity", "kind": "research", "status": "confirmed", "published": "2026-10-22T10:43:11+00:00", "topics": [ "pypi" ], "severity": "high", "summary": "litellm 1.107.0 PyPI wheels and Docker images shipped a .pth credential stealer and an hourly remote code loader that exfiltrate to litellm.dev. Analysis, IOCs, and how to respond.", "action": "" }, { "id": "1d16a3061e0901b8", "title": "LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release", "url": "https://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-22T13:58:48+05:30", "topics": [ "pypi", "ci-cd" ], "severity": "high", "summary": "LiteLLM on Wednesday disclosed that threat actors compromised \"multiple independent security controls\" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.0", "action": "" }, { "id": "da9f7e6dd1b102c6", "title": "China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack", "url": "https://thehackernews.com/2026/10/china-linked-hackers-use-artex-ai.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-22T09:51:26+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was ", "action": "" }, { "id": "358bb12e7d80c64c", "title": "PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches", "url": "https://socket.dev/blog/php-embargo-dispute?utm_medium=feed", "source": "Socket", "source_id": "socket", "kind": "research", "status": "confirmed", "published": "2026-10-21T19:06:44.240000+00:00", "topics": [ "vulns" ], "severity": "info", "summary": "The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.", "action": "" }, { "id": "2d7bcb1fcec6b9e4", "title": "LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor", "url": "https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-21T23:31:57+05:30", "topics": [ "pypi" ], "severity": "high", "summary": "The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through P", "action": "" }, { "id": "b5a0b5ad6c12548e", "title": "PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline", "url": "https://socket.dev/blog/php-critical-rce-patches?utm_medium=feed", "source": "Socket", "source_id": "socket", "kind": "research", "status": "confirmed", "published": "2026-10-21T15:28:54.996000+00:00", "topics": [ "vulns" ], "severity": "info", "summary": "PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.", "action": "" }, { "id": "ec2de5e96b358e60", "title": "Graphalgo campaign moves upstream into infrastructure as code", "url": "https://www.reversinglabs.com/blog/graphalgo-campaign-moves-upstream-into-infrastructure-as-code", "source": "ReversingLabs", "source_id": "reversinglabs", "kind": "research", "status": "confirmed", "published": "2026-10-21T15:00:00+00:00", "topics": [ "go" ], "severity": "high", "summary": "First reported by ReversingLabs in February, the malware has moved to Terraform providers and Go modules. Here\u2019s what you need to know.", "action": "" }, { "id": "f8a1ed8444ae19ad", "title": "PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet", "url": "https://www.wiz.io/blog/php2shell-php-rce", "source": "Wiz", "source_id": "wiz", "kind": "research", "status": "confirmed", "published": "2026-10-21T13:59:59+00:00", "topics": [ "vulns" ], "severity": "info", "summary": "Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.", "action": "" }, { "id": "9d1ace9e2ba8ce1c", "title": "LiteLLM Compromised, Steals Credentials", "url": "https://www.wiz.io/blog/litellm-compromised-steals-credentials", "source": "Wiz", "source_id": "wiz", "kind": "research", "status": "confirmed", "published": "2026-10-21T13:44:12+00:00", "topics": [ "pypi" ], "severity": "high", "summary": "In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a credential stealer targeting browser, cloud and AI secrets as well as a dormant C2 capability.", "action": "" }, { "id": "53e54ec5a56a6ef5", "title": "LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials", "url": "https://socket.dev/blog/litellm-compromise?utm_medium=feed", "source": "Socket", "source_id": "socket", "kind": "research", "status": "confirmed", "published": "2026-10-21T13:41:48.036000+00:00", "topics": [ "pypi" ], "severity": "high", "summary": "A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.", "action": "" }, { "id": "e6e362023ff97fbf", "title": "Software supply chain security best practices for 2026", "url": "https://www.aikido.dev/blog/software-supply-chain-security-best-practices", "source": "Aikido", "source_id": "aikido", "kind": "research", "status": "confirmed", "published": "2026-10-21T13:25:00+00:00", "topics": [ "vulns" ], "severity": "high", "summary": "This guide walks through supply chain security best practices that would have stopped the attacks of the past 18 months. Category: DevSec Tools & Comparisons", "action": "" }, { "id": "d83190a56abc7c11", "title": "Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands", "url": "https://thehackernews.com/2026/10/google-chrome-adds-clickfix-warnings-to.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-21T18:45:09+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Google on Tuesday said it's rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social engineering technique in which bad actors trick users into copying and pasting malicious co", "action": "" }, { "id": "6a74f695cd58f166", "title": "LiteLLM compromised again: infostealer and RAT found in version 1.107.0", "url": "https://www.aikido.dev/blog/litellm-compromised-infostealer-rat", "source": "Aikido", "source_id": "aikido", "kind": "research", "status": "confirmed", "published": "2026-10-21T13:05:00+00:00", "topics": [ "pypi" ], "severity": "high", "summary": "LiteLLM 1.107.0 contains an infostealer and RAT, and PyPI has quarantined the package. See if you\u2019re affected, what it steals, and what to rotate. Category: Vulnerabilities & Threats", "action": "" }, { "id": "7872674d60ce86da", "title": "China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors", "url": "https://thehackernews.com/2026/10/china-aligned-bronze-sandcastle-abuses.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-21T17:35:00+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025. \"The most distinctive technical marker for Bronze Sandcastle is ", "action": "" }, { "id": "692eb73cab37d8df", "title": "The Harness Is the Hard Part of Agentic Pentesting", "url": "https://thehackernews.com/2026/10/the-harness-is-hard-part-of-agentic.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-21T16:02:40+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run against production and worth acting on afterward lives in the harness around the ", "action": "" }, { "id": "8bee772252e38318", "title": "Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections", "url": "https://thehackernews.com/2026/10/attackers-hijacked-over-300-tor-exit.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-21T16:00:27+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found. Exit relays are the last hop in a Tor circuit, where traffic leaves the network for its destination. Only ", "action": "" }, { "id": "75670b434e8b4bc1", "title": "Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites", "url": "https://thehackernews.com/2026/10/attackers-abuse-updraftcentral-keys-to.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-21T14:31:12+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites. TeamUpdraft is the developer behind UpdraftPlus, a popular Wor", "action": "" }, { "id": "7180c57c5aab1c5c", "title": "Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion", "url": "https://thehackernews.com/2026/10/hackers-hid-vasilek-backdoor-in-vmware.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-21T11:35:15+05:30", "topics": [ "vulns" ], "severity": "high", "summary": "A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report published by Russian cybersecurity firm Solar, the activity has been attributed to a threat cluster dubbed Partisan Zmiy, which is also known a", "action": "" }, { "id": "e10bf877bed658e3", "title": "vlt 1.5.0 Adds Agent Skills Management", "url": "https://socket.dev/blog/vlt-skills?utm_medium=feed", "source": "Socket", "source_id": "socket", "kind": "research", "status": "confirmed", "published": "2026-10-21T02:27:15.112000+00:00", "topics": [ "vulns" ], "severity": "high", "summary": "vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.", "action": "" }, { "id": "8d322f5d82c4c4dc", "title": "PHP2Shell: Critical PHP vulnerabilities, affected versions and fixes", "url": "https://www.aikido.dev/blog/critical-vulnerabilities-in-php-php2shell", "source": "Aikido", "source_id": "aikido", "kind": "research", "status": "confirmed", "published": "2026-10-21T01:54:00+00:00", "topics": [ "vulns" ], "severity": "info", "summary": "A critical PHP vulnerability lets attackers run code remotely on unpatched servers. See affected versions, patches, mitigations and how to check your exposure. Two PHP RCE flaws (CVE-2026-109618, CVE-2026-109619) are being exploited now. Here\u2019s which versions to update to and wha", "action": "" }, { "id": "52e0e75ca3fe2093", "title": "PHP2Shell - Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619): detection, analysis, and remediation", "url": "https://securitylabs.datadoghq.com/articles/php2shell-critical-vulnerabilities-in-php/", "source": "Datadog Security Labs", "source_id": "datadog", "kind": "research", "status": "confirmed", "published": "2026-10-21T00:00:00+00:00", "topics": [ "vulns" ], "severity": "info", "summary": "Learn about the two critical vulnerabilities in PHP dubbed PHP2Shell.", "action": "" }, { "id": "e6b581fd69196920", "title": "LiteLLM supply chain compromise: What you need to know", "url": "https://securitylabs.datadoghq.com/articles/litellm-compromised-pypi-docker/", "source": "Datadog Security Labs", "source_id": "datadog", "kind": "research", "status": "confirmed", "published": "2026-10-21T00:00:00+00:00", "topics": [ "pypi" ], "severity": "high", "summary": "Malicious releases of LiteLLM v1.107.0 were published to PyPI and container registries following multiple maintainer account compromises.", "action": "" }, { "id": "35f32033ba5ad8b5", "title": "From Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage", "url": "https://www.wiz.io/blog/from-phishing-to-llmjacking", "source": "Wiz", "source_id": "wiz", "kind": "research", "status": "confirmed", "published": "2026-10-20T20:03:10+00:00", "topics": [ "ai-tools" ], "severity": "high", "summary": "How a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of dollars incurred in unauthorized AI API usage", "action": "" }, { "id": "49724aea5fefde99", "title": "Rust 1.100 Will Add Dependency Cooldowns to Cargo", "url": "https://socket.dev/blog/rust-cargo-cooldowns?utm_medium=feed", "source": "Socket", "source_id": "socket", "kind": "research", "status": "confirmed", "published": "2026-10-20T14:21:31.302000+00:00", "topics": [ "rust" ], "severity": "info", "summary": "Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.", "action": "" }, { "id": "0d98f0291d55c8e6", "title": "Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites", "url": "https://thehackernews.com/2026/10/hackers-use-autonomous-ai-agents-to.html", "source": "The Hacker News", "source_id": "thn", "kind": "news", "status": "reported", "published": "2026-10-20T19:37:17+05:30", "topics": [ "ai-tools" ], "severity": "high", "summary": "A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it happen because the operators left their control panels open on the internet. The agents tried more than 1,200 sites and rea", "action": "" }, { "id": "e9db6013180c63d2", "title": "Actively exploited: EG Secure Solutions SiteGuard Server Edition (CVE-2026-106931)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106931", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-20T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "1a3bf1123f20a8e8", "title": "Actively exploited: Plex Media Server (CVE-2026-96656)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96656", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-20T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "ac0fc9e5453fd064", "title": "Actively exploited: Plex Media Server (CVE-2026-96655)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96655", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-20T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be chained with CVE-2026-96652, C", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "b2e909f800220e8e", "title": "Actively exploited: Plex Media Server (CVE-2026-96654)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96654", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-20T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96655, and CVE-2", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "ffcec7b94354decb", "title": "Actively exploited: Plex Media Server (CVE-2026-96652)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-20T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability ca", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "6a26346feb39eae9", "title": "Actively exploited: Siemens Software Center (CVE-2026-110936)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110936", "source": "CISA KEV", "source_id": "kev", "kind": "kev", "status": "confirmed", "published": "2026-10-20T12:00:00+00:00", "topics": [ "vulns" ], "severity": "critical", "summary": "Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affect", "action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage" }, { "id": "b51d9e02a286801a", "title": "Introducing pathrunner: An AWS privilege escalation framework", "url": "https://securitylabs.datadoghq.com/articles/introducing-pathrunner-aws-privilege-escalation-framework/", "source": "Datadog Security Labs", "source_id": "datadog", "kind": "research", "status": "confirmed", "published": "2026-10-20T00:00:00+00:00", "topics": [ "ci-cd" ], "severity": "info", "summary": "Introducing pathrunner, a modular, cloud-native offensive security framework that automates the exploitation of AWS IAM privilege escalation paths.", "action": "" }, { "id": "eb72a852c9af5ecb", "title": "Supply Chain Zero Days: Closing the Gap Between Publication and Detection", "url": "https://www.wiz.io/blog/detect-supply-chain-zero-days-at-publication", "source": "Wiz", "source_id": "wiz", "kind": "research", "status": "confirmed", "published": "2026-10-19T14:39:29+00:00", "topics": [ "ci-cd", "vulns" ], "severity": "high", "summary": "When trusted packages are compromised, malicious code can quickly spread throughout and beyond developer environments. See how Wiz\u2019s supply chain pipeline identifies compromised packages at publication, helping teams detect zero-day supply chain compromises in Wiz Defend before a", "action": "" }, { "id": "16e2569f0813fc7f", "title": "Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack", "url": "https://www.wiz.io/blog/anatomy-of-ai-driven-cloud-attacks", "source": "Wiz", "source_id": "wiz", "kind": "research", "status": "confirmed", "published": "2026-10-19T11:26:53+00:00", "topics": [ "ci-cd" ], "severity": "info", "summary": "Wiz CIRT responded to AI-driven attacks spanning cloud, Kubernetes, CI/CD, and identity. Learn how these attacks behave and how to detect them.", "action": "" }, { "id": "87a19720f0b00003", "title": "snare v1.5.0 released \u2014 the gate: scan before code comes in or runs", "url": "https://github.com/nexlabz/snare/releases/tag/v1.5.0", "source": "snare", "source_id": "snare", "kind": "release", "status": "confirmed", "published": "2026-10-14T22:51:56Z", "topics": [ "snare" ], "severity": "info", "summary": "snare now checks code before your coding agent pulls it in or runs it, and shows you what it found. The incident behind this release was ordinary work: a pull, an install, npm run dev. A coding agent did it in a repository that had been poisoned upstream, and nobody found out for", "action": "Update: `snare update`." }, { "id": "416caaeb31b77c3f", "title": "snare v1.4.3 released \u2014 a purge that reported zero and left the payload", "url": "https://github.com/nexlabz/snare/releases/tag/v1.4.3", "source": "snare", "source_id": "snare", "kind": "release", "status": "confirmed", "published": "2026-10-13T20:46:46Z", "topics": [ "snare" ], "severity": "info", "summary": "Found by purging a real repository and then scanning what came back. A 29,057-byte api.js survived the rewrite, and the purge printed blobs still carrying a hidden payload: 0. The verify step re-runs the same cleaner, so anything the cleaner cannot see verifies clean \u2014 a false cl", "action": "Update: `snare update`." }, { "id": "bcd7bd1ef372b046", "title": "snare v1.4.2 released \u2014 four false positives out, four real ways in", "url": "https://github.com/nexlabz/snare/releases/tag/v1.4.2", "source": "snare", "source_id": "snare", "kind": "release", "status": "confirmed", "published": "2026-10-13T00:42:41Z", "topics": [ "snare" ], "severity": "info", "summary": "Found by running 1.4.1 against a real repository rather than a fixture. The false positive node\\s+.*(-e|--eval) left the flag unanchored, so atlas-engine matched. An honest PostToolUse hook running packages/atlas-engine/hooks/atlas-tag.ts was reported as *\"an agent hook runs a dr", "action": "Update: `snare update`." } ] }