Advertise on podcast: Daily DefSec Brief

An access broker guessed its way into FortiGate firewalls and decrypted their configs for the domain accounts inside, a planted AGENTS.md file in a Downloads folder told a coding agent to install malware, and the Brotli flaw Node.js patched last week turns out to live in Google's decoder. Plus 33 critical ArubaOS fixes, a third PHP flaw with no patch yet, and a forgotten Popcorn Time updater. Every version number and every fix in this episode was checked against the vendor's own advisory before it aired. Today's question: Where does your team let coding agents start, and who decided? Reply in the comments or at [email protected]. 1. Guessed FortiGate logins gave up domain accounts - CVE-2025-64446, CVE-2026-0257, CVE-2019-6693 - Fixed: FortiWeb 7.0.12, 7.2.12, 7.4.10, 7.6.5 or 8.0.2 - Do: Take Fortinet admin logins off the internet - https://fortiguard.fortinet.com/psirt/FG-IR-25-910 2. AGENTS.md in Downloads steered a coding agent - Do: Keep coding agents out of the Downloads folder - https://forever.security/blog/hijacking-ai-agents-via-downloads-folder 3. Update: the Brotli flaw reaches far past Node.js - CVE-2026-111497 - Fixed: Brotli 1.0.10, 1.1.1 or 1.2.1 - Do: Patch every copy of the Brotli decoder - https://research.jfrog.com/post/brotli2shell-beyond-node2shell-and-http2shell/ 4. ArubaOS fixes 33 critical flaws - CVE-2026-79844, CVE-2026-79845, CVE-2026-79846 (+ 2 more) - Fixed: 10.8.1.2, 10.7.2.7, 10.4.1.14, 8.13.3.1 or 8.10.0.24 - Do: Upgrade ArubaOS and restrict management access - https://cyber.gc.ca/en/alerts-advisories/hpe-security-advisory-av26-1079 5. Pillow runs commands through an image's filename - CVE-2026-112900, CVE-2026-112393, CVE-2026-112403 - Fixed: 13.0.0 - Do: Upgrade Pillow in every Python project - https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh 6. Update: a third PHP flaw, with no patch yet - CVE-2026-115560 - Do: Keep PHP's session upload progress turned off - https://www.php.net/archive/2026.php#2026-10-23-1 7. Tailscale SSH lets one device reach root elsewhere - Do: Narrow your Tailscale SSH access rules - https://tailworm.com/ 8. Windows Server 2016 updates end in January - Do: Inventory your Windows Server 2016 machines - https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2016 9. Researchers switched off a Popcorn Time updater - CVE-2026-30612 - Do: Find and remove Time4Popcorn from company machines - https://labs.eye.security/operation-ixim-preventing-a-botnet-of-millions-of-popcorn-time-users/

Attackers are exploiting a third VeloCloud Orchestrator zero-day, stolen Microsoft 365 tokens were replayed against 79 organizations from one hosting range, and Railway is telling every customer to rotate their secrets. Plus eMudhra's root leaving Chrome on October 27, and a firewall whose admin password was "password". Every version number in this episode was checked against the vendor's own advisory before it aired. Today's question: How does your team keep audit findings from turning into a pay negotiation? Reply in the comments or at [email protected]. 1. Third exploited VeloCloud Orchestrator zero-day - CVE-2026-114625 - Fixed: 5.2.3.18, 6.1.3.10 or 6.4.2.12 - Do: Patch and restrict VeloCloud Orchestrator - https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199 2. Stolen M365 tokens replayed from one hosting range - Do: Search your sign-in logs for that IP range - https://www.huntress.com/blog/token-replay-spray 3. Railway breach: rotate every secret stored there - Do: Rotate every secret you keep in Railway - https://blog.railway.com/p/security-disclosure-wednesday-october-21st 4. Update: Chrome drops eMudhra's root on Oct 27 - CVE-2026-91403 - Do: Replace eMudhra certificates and update Java - https://www.oracle.com/security-alerts/alert-cve-2026-91403.html 5. Update: LiteLLM's stolen tokens came from its logs - Do: Stop logging response bodies on your AI gateway - https://docs.litellm.ai/blog/security-incident-oct-21-2026 6. NoMachine web service open to remote code - CVE-2026-114549 - Fixed: 10.1.7, 9.9.6 or 8.27.1 - Do: Upgrade NoMachine and keep its web port internal - https://www.zerodayinitiative.com/advisories/ZDI-26-786/ 7. Splunk fixes 9.9 flaws in Enterprise and SOAR - CVE-2026-76299, CVE-2026-76302, CVE-2026-76531 (+ 1 more) - Fixed: 9.4.16, 10.0.11, 10.2.8 or 10.4.4; SOAR 8.7.0 - Do: Upgrade Splunk Enterprise and SOAR - https://advisory.splunk.com/advisories/SVD-2026-1008 8. Roundcube fixes 20 flaws in 1.6.20 and 1.7.5 - Fixed: 1.6.20 or 1.7.5 - Do: Upgrade Roundcube - https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5 9. Linux KSMBD flaws public before a kernel fix - Do: Turn off KSMBD wherever it isn't needed - https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html 10. Firewall admin password was "password" - Do: Replace type 7 passwords on your Cisco gear - https://www.theregister.com/security/2026/10/22/it-department-and-auditors-at-major-pharmacy-chain-got-into-a-rip-roaring-fight-about-using-password-on-cisco-firewall/5304592

Attackers are now exploiting PHP2Shell, a poisoned LiteLLM release carried a stealer for AI and cloud keys, and Fortinet shipped critical fixes while holding the CVEs until November 10. Every version number and every fix in this episode was checked against the vendor's own advisory or the researchers' report before it aired. Today's question: How do you check that your security alerts still reach a person? Reply in the comments or at [email protected]. 1. Update: PHP2Shell is now being exploited - CVE-2026-109618, CVE-2026-109619 - Do: Patch PHP on every internet-facing server - https://www.php.net/archive/2026.php 2. LiteLLM 1.107.0 shipped a credential stealer - Do: Rebuild affected LiteLLM hosts and rotate their keys - https://research.jfrog.com/post/litellm-hijacked-again/ 3. Fortinet ships critical fixes with no CVEs yet - Do: Patch FortiGates and restrict admin access - https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products 4. GitLab fixes a 10.0 flaw reaching back to 2014 - CVE-2026-110264, CVE-2026-15723, CVE-2026-112212 - Do: Upgrade self-managed GitLab again - https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/ 5. A BlackLotus copy beats Secure Boot on patched PCs - CVE-2022-21894 - Do: Start rolling out Microsoft's Secure Boot revocation - https://securelist.com/uefi-bootkit-blackx/121539/ 6. Node.js fixes RCE and TLS hostname bypasses - CVE-2026-111497, CVE-2026-105483, CVE-2026-106069 (+ 1 more) - Do: Upgrade Node.js and rebuild images that bundle it - https://nodejs.org/en/blog/vulnerability/october-2026-security-releases 7. Clustered Cisco Expressway open to root commands - CVE-2026-76466 - Do: Upgrade clustered Cisco Expressway servers - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t 8. BIND fixes four flaws, and 9.18 gets no fix - CVE-2026-94300, CVE-2026-19630, CVE-2026-96888 (+ 1 more) - Do: Patch BIND, and move servers off 9.18 - https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072 9. Chrome now warns when you copy a ClickFix command - Do: Turn on Enhanced Protection in Chrome by policy - https://www.bleepingcomputer.com/news/google/google-chrome-adds-gemini-powered-scam-detection-warns-users-of-clickfix-attacks/ 10. OpenAI agents switched off misalignment alerts - Do: Keep agents' keys away from alerting config - https://www.bleepingcomputer.com/news/security/openai-agents-disabled-safety-monitoring-one-lied-about-it/

PHP ships fixes today for two critical flaws whose details leaked ahead of disclosure, and a certificate authority's signing keys turned out to be guessable, one of them the number four. Also: a joint advisory on SafePay ransomware, a hijacked account that swapped OVHcloud's CLI downloads for a stealer, and a test account with the password Password1. Fixes were checked against the vendor's advisory or release notes where one exists, and against the researchers' report where not. Today's question: How does your team find accounts that should have been deleted? Reply in the comments or at [email protected]. 1. PHP fixes two leaked critical flaws today - CVE-2026-109618, CVE-2026-109619 - Do: Find every copy of PHP you run - https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities 2. eMudhra CA keys were trivially guessable - CVE-2026-111943 - Do: Update the CA bundles outside your browsers - https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ 3. SafePay: 600 victims via passwords, old flaws - CVE-2020-3259, CVE-2023-20269, CVE-2023-27532 (+ 2 more) - Do: Require MFA on every VPN login - https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a 4. OVHcloud CLI releases carried a secret stealer - Fixed: 0.16.0 - Do: Turn on release immutability for your GitHub repositories - https://www.bleepingcomputer.com/news/security/ovhcloud-cli-releases-backdoored-on-github-to-steal-developer-secrets/ 5. Zeabur shuts down after second breach - Do: Rotate every secret you stored on Zeabur - https://www.bleepingcomputer.com/news/security/zeabur-shutting-down-after-second-security-breach-in-two-months/ 6. OpenCode silently patched a code-execution flaw - Fixed: 1.18.33 - Do: Upgrade OpenCode on Windows developer machines - https://github.com/anomalyco/opencode/releases/tag/v1.18.33 7. Chrome 156 fixes 353 security flaws - CVE-2026-113341, CVE-2026-113279, CVE-2026-113072 (+ 3 more) - Fixed: 156.0.8078.47/.48 - Do: Push the Chrome update and force the restart - http://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html 8. Oracle's quarterly update fixes 1,209 flaws - Do: Patch Oracle Fusion Middleware and E-Business Suite first - https://www.oracle.com/security-alerts/cpuoct2026.html 9. A 2012 Password1 test account let ransomware in - Do: Disable accounts that haven't signed in for a year - https://www.theregister.com/cyber-crime/2026/10/20/password1-and-a-forgotten-test-account-land-welsh-outfits-in-hot-water/5304139

The NetScaler flaw that crashed appliances is a step in a root takeover whose implant tries to copy itself to the HA partner. ClickFix crews bring a signed Siemens program to run their malware, Plex servers are being hijacked a day after an exploit went public, and a fake WatchGuard download site collects VPN logins. Every version number and every fix in this episode was checked against the vendor's advisory, release notes or the CVE record before it aired. Today's question: Where does your team tell people to get the VPN client? Reply in the comments or at [email protected]. 1. Update: NetScaler crash bug drives root takeover - CVE-2026-88771, CVE-2026-88779 - Do: Check both NetScaler HA nodes, rotate keys - https://www.rapid7.com/blog/post/ra-netscaler-intrusions-chaining-cve-2026-88771-and-cve-2026-88779 2. ClickFix runs malware through signed Siemens app - CVE-2026-110936 - Fixed: V4.0.9.8 - Do: Alert on Siemens Software Center in AppData - https://www.securityweek.com/siemens-software-center-vulnerability-exploited-in-clickfix-malware-attacks/ 3. Redis RESTORE flaw reported exploited - CVE-2026-25243 - Fixed: 8.6.5, 7.2.15 or 6.2.23 - Do: Block the RESTORE command in Redis ACLs - https://cyber.gc.ca/en/alerts-advisories/redis-security-advisory-av26-423 4. Plex2Shell exploited a day after the write-up - CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 (+ 1 more) - Fixed: 1.43.3.10861 - Do: Update Plex Media Server - https://www.cve.org/CVERecord?id=CVE-2026-96652 5. Rank Math PRO downloads shipped a backdoor - CVE-2026-111862 - Fixed: 3.0.124 - Do: Restore affected Rank Math sites from backup - https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html 6. OpenCode Console exposed stored AI provider keys - Do: Rotate any AI keys stored in OpenCode Console - https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/ 7. Update: GhostAction moves to phishing maintainers - Do: Turn off automatic tasks in VS Code - https://thehackernews.com/2026/10/ghostaction-attackers-plant-credential.html 8. Archibus login bypass leads to code execution - CVE-2026-107186, CVE-2026-107187, CVE-2026-107188 - Fixed: 2025.02 - Do: Upgrade Eptura Archibus - https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed 9. Fake WatchGuard site steals VPN logins - Do: Give staff a bookmarked VPN client download link - https://www.huntress.com/blog/fake-watchguard-vpn-credential-phishing

Attackers used ConnectWise's app credentials to enter Microsoft 365 tenants. Also: a FortiGate implant, stolen UpdraftCentral keys, NTLMv1 blocks, AOMEI's update servers, and fixes. Every version number and every fix in this episode was checked against the vendor's advisory or the CVE record before it aired. Today's question: How do you review vendor apps in your tenant? Reply in the comments or at [email protected]. 1. ConnectWise app credentials used on M365 tenants - Do: Disable ConnectWise app identities and audit their roles - https://www.huntress.com/blog/vendor-credential-enables-unauthorized-access 2. FortiManager break-in leads to memory-only implant - CVE-2025-61624 - Fixed: FortiOS 7.6.5 or 7.4.10 - federal due 2026-10-19 - Do: Patch FortiOS and rotate FortiManager-held credentials - https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/ 3. Stolen UpdraftCentral keys backdoor WordPress - Do: Delete UpdraftCentral keys from your WordPress sites - https://patchstack.com/articles/updraftcentral-key-compromise-wordpress-backdoors/ 4. AOMEI update servers tampered with for minutes - Do: Hunt AOMEI machines for the RadminComponentRuntime task - https://cloud.google.com/blog/topics/threat-intelligence/investigating-ephemeral-supply-chain-tampering/ 5. Update: KVM escape PwnEscape gets a kernel fix - CVE-2026-99999 - Do: Patch the kernel on KVM hosts - https://access.redhat.com/security/cve/cve-2026-99999 6. Max-severity Magento flaw bypasses September's fix - CVE-2026-103849 - Do: Apply Adobe's October Magento patch now - https://www.adobe.com/trust/security/products/commerce/apsb26-153.html 7. MOVEit Transfer fixes 12 high-severity flaws - CVE-2026-89067 - Fixed: 2025.1.6 or 2026.0.4 - Do: Upgrade MOVEit Transfer - https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-1058 8. Firefox 158 fixes 77 flaws, 30 high - Fixed: Firefox 158, ESR 153.5 or 115.43 - Do: Push the Firefox and Thunderbird updates - https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/ 9. Airflow SSH accepts any server key by default - CVE-2026-94134, CVE-2026-94135 - Fixed: 7.0.0 - Do: Upgrade Airflow's SSH and SFTP providers - https://www.ox.security/blog/by-default-insecure-apache-airflow-disables-ssh-host-key-verification/ 10. Official OpenAI skill used an unowned domain - Do: Search your code for render-internal.com - https://www.air.security/blog-posts/render-openai 11. Windows now blocks NTLMv1 sign-on by default - Do: Find NTLMv1 dependencies before setting Audit mode back - https://support.microsoft.com/help/5066470

Attackers are using a BeyondTrust Remote Support zero-day and the Atlassian Data Center file-read flaw. Also: Office Preview Pane flaws, AI coding tokens stolen, Drupal, Next.js and NGINX fixes, hijacked NAS boxes, spyware in ads, and AI agents on leaked credentials. Every version number and every fix in this episode was checked against the vendor's own advisory before it aired. Today's question: Where do your developers' AI tool tokens live, and how long do they last? Reply in the comments or at [email protected]. 1. BeyondTrust Remote Support zero-day exploited - CVE-2026-102764 - Do: Patch BeyondTrust Remote Support and review it for compromise - https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/ 2. Update: Atlassian file-read flaw now exploited - CVE-2026-21589 - Fixed: see Atlassian's table (Confluence 9.2.26 / 10.2.19, Jira 9.12.40 / 10.3.26 / 11.3.12, Bitbucket 9.4.26 / 10.2.8 / 10.5.1) - federal due 2026-10-18 - Do: Patch Atlassian Data Center or take it offline - https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html 3. Critical Office flaws hit via the Preview Pane - CVE-2026-108448, CVE-2026-108439, CVE-2026-108440 - Fixed: LTSC 2024 16.0.17932.21056, LTSC 2021 16.0.14334.20974, Mac 16.114.26101123 - Do: Make sure Tuesday's Office update actually installed - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108448 4. Aoki stealer takes AI coding assistant tokens - Do: Keep long-lived tokens off developer laptops - https://www.infosecurity-magazine.com/news/aoki-infostealer-ai-coding/ 5. Drupal critical flaw; 28% on end-of-life branches - CVE-2026-108097 - Fixed: 11.4.10, 11.3.19 or 10.6.19 - Do: Update Drupal core, or uninstall Field UI - https://www.drupal.org/sa-core-2026-014 6. Hacked edge devices resold as residential proxies - CVE-2024-3272, CVE-2024-3273, CVE-2021-44228 (+ 1 more) - Do: Take NAS boxes and recorders off the internet - https://www.greynoise.io/blog/proxyjacking-edge-devices-residential-proxies 7. Next.js out-of-band fix for two critical RCEs - CVE-2026-96889 - Fixed: 16.4.1 or 15.5.28 - Do: Upgrade Next.js - https://github.com/vercel/next.js/security/advisories/GHSA-2464-fhr4-w9xw 8. Online ads delivered zero-click spyware - Do: Block ads on managed phones and browsers - https://therecord.media/spyware-citizen-lab-advertising 9. NGINX fixes five flaws, one from 2005 - CVE-2026-15176, CVE-2026-93479, CVE-2026-95101 (+ 2 more) - Fixed: 1.30.6 or 1.31.7 - Do: Upgrade NGINX - https://nginx.org/en/security_advisories.html 10. Test AI agents got in on leaked credentials - Do: Find and rotate credentials sitting in your code - https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html

Attackers are getting root on Cisco Secure Email Gateways with a crafted attachment, and the fix is a month old. Also: a PAN-OS zero-day, Ahsay's failed patch, Nextcloud, Zimbra, curl, Claude Code Desktop, and which package managers check their downloads. Every version number and every fix in this episode was checked against the vendor, the CVE record or the researcher who found it before it aired. Today's question: Have you ever turned on a package manager's integrity checks on purpose, and what made you do it? Reply in the comments or at [email protected]. 1. Cisco email gateway exploited through attachments - CVE-2026-76519 - Fixed: Content Scanner Tools 25.3.0.5525; AsyncOS 15.5.5-014 or 16.5.0-780 - federal due 2026-10-17 - Do: Update the Cisco email gateway's content scanner - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp 2. PAN-OS management interface zero-day exploited - CVE-2026-0322 - Fixed: 12.2.4, 12.1.4-h12, 12.1.7-h8, 12.1.10-h2, 11.2.16, 11.1.16-h3, 10.2.18-h12 - federal due 2026-10-17 - Do: Patch PAN-OS and lock down management access - https://security.paloaltonetworks.com/CVE-2026-0322 3. Update: AhsayCBS hotfix out, first patch failed - CVE-2026-105134, CVE-2026-105133 - Fixed: 10.3.4.45 (v10); 9.15.2.70 (v7 to v9) - federal due 2026-10-17 - Do: Apply the AhsayCBS hotfix and reboot - https://www.huntress.com/blog/ahsaycbs-flaws-exploit 4. Nextcloud's built-in Collabora app exploited - CVE-2026-110447 - Fixed: 26.4.303 - Do: Update or remove Nextcloud's built-in Collabora app - https://cveawg.mitre.org/api/cve/CVE-2026-110447 5. Linux vhost flaw: local root, and a VM escape - CVE-2026-74580 - Fixed: 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9 - Do: Update and reboot your Linux hosts - https://cloud.tencent.com/announce/detail/2483 6. Zimbra: any user can send mail as the CEO - CVE-2026-73571, CVE-2026-10631, CVE-2026-50055 (+ 2 more) - Fixed: 10.1.17 (CVE-2026-73571); 10.1.20 (CVE-2026-10631, CVE-2026-50055) - Do: Upgrade Zimbra - https://www.rapid7.com/blog/post/ve-breaking-zimbra-identity-boundaries-part-1 7. curl fixes its first High flaw since 2023 - CVE-2026-92392 - Fixed: 8.23.0 - Do: Update curl - https://curl.se/docs/CVE-2026-92392.html 8. Claude Code Desktop's preview pane read SSH keys - Fixed: 1.30096.1 - Do: Get long-lived secrets off developer laptops - https://noma.security/noma-labs/sneakpeek-how-the-preview-pane-in-claude-code-desktop-can-exfiltrate-your-data 9. AI built a Chrome exploit in six days - CVE-2026-85045 - Fixed: 152.0.7977.82 - Do: Force Chrome relaunches after updates - https://xbow.com/blog/xbow-built-a-chrome-full-chain-exploit 10. Of 25 package managers, two check every download - Do: Commit lockfiles and install from them in CI - https://blog.trailofbits.com/2026/10/14/package-managers-have-an-integrity-problem/

Attackers chained Ivanti Connect Secure zero-days to take over VPNs without a login, one of them fully patched, and Microsoft's record October updates fix a Windows flaw that skips the warning on downloaded files. Also: Fortinet, Chrome, Copilot in Visual Studio, SAP, npm trusted publishing, Ghostscript, and a Docker Hub flaw that handed old tokens to new owners. Every version number and every fix in this episode was checked against the vendor's advisory or the CVE record before it aired. Today's question: Which remote-access path into your network would you least like to explain to an auditor? Reply in the comments or at [email protected]. 1. Ivanti VPN zero-days give root before login - CVE-2026-104935 - Fixed: 22.8R2.5, or 25.1.3.0 or later - federal due 2026-10-16 - Do: Upgrade Ivanti and rotate its directory account - https://www.cve.org/CVERecord?id=CVE-2026-104935 2. Exploited Windows flaw leads record Patch Tuesday - CVE-2026-96951, CVE-2026-70571, CVE-2026-70229 - federal due 2026-10-16 - Do: Push October's Windows updates - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951 3. FortiSandbox and FortiSIEM fix pre-login flaws - CVE-2026-107656, CVE-2026-106173 - Fixed: FortiSandbox 5.0.7 or 4.4.10; FortiSIEM 7.5.1 - Do: Upgrade FortiSandbox and FortiSIEM - https://fortiguard.fortinet.com/psirt/FG-IR-26-185 4. Chrome update fixes seven critical flaws - CVE-2026-110152, CVE-2026-110149, CVE-2026-110136 - Fixed: 155.0.8059.79/.80; Extended Stable 152.0.7977.167 - Do: Update Chrome and force the restart - http://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html 5. Copilot in Visual Studio could run commands - CVE-2026-103572 - Fixed: 17.14.42 or 18.10.4 - Do: Update Visual Studio and SSMS - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572 6. SAP fixes four critical flaws in October - CVE-2026-89111, CVE-2026-89110 - Fixed: sap-cloud-sdk 0.45.2 - Do: Apply SAP's October security notes - https://www.cve.org/CVERecord?id=CVE-2026-89111 7. Vendor-run gateway let an attacker into a bank - Do: Require MFA on vendor-managed remote access - https://unit42.paloaltonetworks.com/noise-inside-network-third-party-risk/ 8. npm trusted publishing trusted repository names - Do: Review your npm packages' trusted publisher settings - https://github.blog/changelog/2026-10-02-unvalidated-npm-trusted-publishing-configurations-now-expire 9. Ghostscript flaw reachable through uploaded PDFs - CVE-2026-39919 - Fixed: 10.08.0 - Do: Update Ghostscript on servers that process uploads - https://www.cve.org/CVERecord?id=CVE-2026-39919 10. Docker Hub handed old tokens to new owners - CVE-2026-105445 - Do: Revoke Docker Hub tokens you don't recognize - https://docker.com/blog/docker-hub-security-advisory-cve-2026-105445

1. GitLab fixes a 10.0 pre-login code execution flaw — CVE-2026-97229 — Fixed: 19.4.2, 19.3.5 or 19.2.8 — Do: Upgrade self-managed GitLab — https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/ 2. Windows 11 23H2 Enterprise updates end in November — Do: Find and upgrade Windows 11 23H2 machines — https://learn.microsoft.com/en-us/windows/release-health/windows-message-center 3. Attackers warmed freezers at French supermarkets — Do: Take vendor-managed equipment off the open internet — https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/ 4. Free AI credits came with a rerouted coding agent — Do: Check where your coding agents send their traffic — https://www.elastic.co/security-labs/threat-command/apex-accelerator-malicious-npm-packages 5. Cheap Android phones ship as proxy exit nodes — Do: Keep unmanaged phones off the internal network — https://www.bitdefender.com/en-us/blog/labs/midnight-mimosa-malware 6. Agent frameworks ran a tool call the model refused — Do: Put the permission check in the tool — https://arxiv.org/html/2610.13651v1 7. VMware's MFA for ESX comes in a paid add-on — Do: Keep SSH off on your ESX hosts — https://www.theregister.com/virtualization/2026/10/13/vmware-is-pushing-so-many-patches-it-thinks-users-need-new-tools-to-manage-the-flood-1/5302172

1. GlobalProtect bypass still feeds ransomware — CVE-2026-0257 — Fixed: 12.1.7, 11.2.12, 11.1.15, 10.2.18-h6, or the matching hotfix — Do: Patch GlobalProtect and review VPN sessions — https://security.paloaltonetworks.com/CVE-2026-0257 2. Fake "security audit" workflow steals CI secrets — Do: Search your repos for unexpected workflow files — https://socket.dev/blog/ghostaction-cloud-credentials 3. Public root exploit for AnyDesk on Linux — Fixed: 8.0.3 — Do: Update AnyDesk on Linux hosts — https://github.com/v12-security/pocs/tree/main/anydesk 4. One prompt exposed every AgentCore agent — Do: Scope down every AgentCore execution role — https://labs.zenity.io/post/agentcorruption-how-a-single-prompt-collapsed-the-entire-cloud-security-model 5. Old Windows loses Windows Update in 2027 — Do: Find unsupported and stuck Windows machines — https://learn.microsoft.com/en-us/windows/release-health/windows-message-center 6. AWS PowerShell tools logged console passwords — CVE-2026-107783 — Fixed: 5.0.306 — Do: Upgrade AWS Tools for PowerShell — https://aws.amazon.com/security/security-bulletins/rss/2026-132-aws/ 7. Exposed Nvidia GPU exporters leak telemetry — CVE-2026-47483 — Fixed: DCGM 4.5.3 — Do: Take the DCGM Exporter off the internet — https://github.com/NVIDIA/product-security/blob/main/2026/5857/5857.md 8. Two letters slip lookalike domains past Chrome — Do: Watch for lookalikes of your domains — https://www.theregister.com/security/2026/10/10/two-characters-open-up-a-world-of-typosquatting-opportunities-in-chromium-browsers/5302383 9. Update: Denmark's CPR breach ran on "123456" — Do: Ban common passwords on partner accounts — https://databreaches.net/2026/10/10/123456-password-used-in-massive-danish-cpr-data-breach/

1. AhsayCBS backup consoles exploited, no patch — CVE-2026-105134, CVE-2026-105133 — Do: Take the AhsayCBS console off the internet — https://www.huntress.com/blog/ahsaycbs-flaws-exploit 2. China-linked crew stays in through a VPN client — CVE-2014-6278, CVE-2015-3306, CVE-2015-5477 (+ 5 more) — federal due 2026-10-11 — Do: Alert on VPN software you didn't deploy — https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a 3. NetScaler's new SAML flaw hits last week's build — CVE-2026-107406 — Fixed: 14.1-73.46 or 13.1-64.29 — Do: Update every NetScaler running SAML — https://support.citrix.com/external/article/CTX697191/ 4. Ollama model pulls can plant root code — CVE-2026-103663 — Fixed: 0.35.0 — Do: Upgrade Ollama and check what it will load — https://cert.pl/en/posts/2026/10/CVE-2026-103663/ 5. Cisco License On-Prem resets any password — CVE-2026-20328, CVE-2026-76454 — Fixed: 10-202608 — Do: Upgrade Cisco License On-Prem — https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssm-access-nttb2dhE 6. Ransomware shut a cloud and its consoles — Do: Test a restore without your provider's console — https://www.bleepingcomputer.com/news/security/ransomware-attack-disrupts-japans-idcf-cloud-used-by-govt-clients/ 7. Vault deny rules miss differently cased names — CVE-2026-89322, CVE-2026-105818 — Fixed: 2.1.2, 1.21.12, 1.20.17 or 1.19.23 — Do: Lowercase your Vault policies, then upgrade — https://cyber.gc.ca/en/alerts-advisories/hashicorp-security-advisory-av26-1019 8. 17,610 fake GitHub repos re-aimed at malware — Do: Use app control on developer workstations — https://www.bleepingcomputer.com/news/security/fakegit-malware-campaign-returns-with-17-610-malicious-github-repos/ 9. Let's Encrypt moves to 64-day certificates — Do: Test your renewals against Let's Encrypt staging — https://letsencrypt.org/2026/10/07/64-day-certs 10. Spirit wants to sell staff Teams chats to Google — Do: Set a retention limit on Teams chats — https://therecord.media/lawmakers-warn-of-google-spirit-ai-training-deal

1. Japan's data thefts came through internal APIs — CVE-2026-72898 — Do: Find the internal APIs your apps expose — https://www.jpcert.or.jp/at/2026/at260030.html 2. Phishing now hides orders for your inbox AI — Do: Confirm every payment change with a phone call — https://blog.barracuda.com/2026/10/07/email-attacks-target-both-humans-ai-assistants 3. SonicWall SMA1000 gets another pre-login flaw — CVE-2026-102255 — Fixed: 12.4.3-03670 or 12.5.0-03082 — Do: Hotfix the SonicWall SMA1000 again — https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017 4. Veeam's Backup Viewer role can run code on v12 — CVE-2025-64393, CVE-2026-93026 — Fixed: 12.3.2.4934 — Do: Patch Veeam 12 and audit Backup Viewer accounts — https://www.veeam.com/kb4934 5. Nexus switches get root-level RCE fixes — CVE-2026-76471, CVE-2026-76465, CVE-2026-76485 (+ 2 more) — Do: Upgrade switches running NX-API, MPLS OAM or NGOAM — https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j 6. Splunk clusters run commands with no login — CVE-2026-76268, CVE-2026-76281 — Fixed: 10.4.3, 10.2.7, 10.0.10 or 9.4.15 — Do: Upgrade Splunk Enterprise on every release line — https://advisory.splunk.com/advisories/SVD-2026-1001 7. Meraki firmware fixes flaws rated up to 9.6 — CVE-2026-76464, CVE-2026-76463 — Fixed: MX 26.1.7 or 26.2.3; MR 33.1.3; MS 26.1.2 or 18.1.9 — Do: Schedule the Meraki firmware upgrades — https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH 8. Attackers messaged ASOS customers through its app — Do: Lock down your customer-messaging platform logins — https://www.rapid7.com/blog/post/it-asos-incident-attackers-using-channels-customers-trust 9. A botnet gets its C2 address from a poem — CVE-2026-42271 — Fixed: LiteLLM 1.83.7 — Do: Get your AI servers off the open internet — https://www.lumen.com/blog/en-us/canto-incognito-tracking-the-poellm-malware

1. FortiBleed is active and locking admins out — Do: Reset Fortinet admin and VPN passwords — https://www.ic3.gov/CSA/2026/261006.pdf 2. Ninja Forms flaw is being used to add admins — CVE-2026-94504, CVE-2026-93836 — Fixed: Ninja Forms 3.15.4 or later, WPC Product Bundles 8.6.7 or later — Do: Update the plugins and check for hidden admins — https://www.wordfence.com/threat-intel/vulnerabilities/id/c599a562-5218-4b37-bcf7-0e82008a4e68?source=cve 3. Hijacked country registries mint real certificates — Do: Watch certificate logs for your domains — https://blog.google/security/chromes-response-to-recent-cctld-registry-hijacks/ 4. Chrome 155 fixes 247 flaws, four critical — CVE-2026-106382, CVE-2026-106197, CVE-2026-106358 (+ 1 more) — Fixed: 155.0.8059.39 — Do: Push the Chrome update and force a relaunch — http://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html 5. FBI blames a contractor's missed patch — Do: Verify your contractors' patching yourself — https://www.securityweek.com/fbi-blames-contractors-missed-patch-for-shinyhunters-breach/ 6. OpenSSH 10.6 fixes bugs, releases will speed up — Fixed: 10.6 — Do: Upgrade OpenSSH and plan for more releases — https://www.openssh.org/txt/release-10.6 7. Outlook will block .msix attachments by default — Do: Check who needs MSIX attachments first — https://www.theregister.com/software/2026/10/06/microsoft-extends-the-outlook-naughty-step-with-two-more-file-types/5301350 8. Npm package was malicious for over a year — Do: Search your lockfiles for function-flag — https://www.cloudsek.com/blog/malfex-malicious-npm-postinstall-supply-chain-campaign

1. ClickFix stages its payload in the browser cache — Do: Disable Windows Script Host where it isn't needed — https://thehackernews.com/2026/10/clickfix-smuggles-payloads-through.html 2. Atlassian Data Center leaks files without a login — CVE-2026-21589 — Fixed: see Atlassian's table (Confluence 9.2.26 / 10.2.19, Jira 9.12.40 / 10.3.26 / 11.3.12, Bitbucket 9.4.26 / 10.2.8 / 10.5.1, Crowd 6.3.7 / 7.0.3 / 7.1.7 / 7.2.4, Bamboo 10.2.24 / 12.1.12, Crucible and Fisheye 4.9.15) — Do: Patch Atlassian Data Center or take it offline — https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html 3. HPE iLO 7 flaw gives remote iLO admin — CVE-2026-79820 — Fixed: 1.25.01 — Do: Update iLO 7 firmware — https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05163en_us&docLocale=en_US 4. ClingSTUN turns old edge devices into proxies — CVE-2023-46805, CVE-2024-21887, CVE-2022-36553 (+ 1 more) — Do: Replace edge devices that no longer get updates — https://www.fortinet.com/blog/threat-research/clingstun-linux-backdoor-abuses-public-stun-infrastructure 5. Dell System Update flaw gives root — CVE-2026-86360, CVE-2026-86361, CVE-2026-86362 (+ 2 more) — Fixed: 2.3.0.0 — Do: Update Dell System Update on PowerEdge servers — https://www.dell.com/support/kbdoc/en-us/000515843/dsa-2026-324-security-update-for-dell-system-update-dsu-vulnerabilities 6. Mail-gateway backdoors hide inside SMTP — Do: Hunt your mail gateways for deleted-binary processes — https://www.rapid7.com/blog/post/tr-smtp-is-the-key-bpfdoor-averat-hitting-the-network-edge/ 7. A retired SSO service stayed up and leaked — Do: Switch off the services you've replaced — https://www.theregister.com/security/2026/10/05/legacy-sign-on-service-comes-back-to-bite-school-software-provider-bromcom/5301156 8. One lookup account pulled 8.8M Danish records — Do: Alert on unusual volume from partner accounts — https://thehackernews.com/2026/10/denmark-says-attackers-accessed-cpr.html