News
- Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
- Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
- U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog
- North Macedonian police arrest alleged administrator behind OLVX cybercrime market
Malware
- Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
- AI worms could spread across your smart devices, Anthropic warns
- Update Windows: Record Patch Tuesday fixes flaw already under attack
- Fake Calendly “Meta Careers” pages steal Facebook and Google logins
Threat Actors
- Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
- Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
- When LLM Gateways Go Wrong: Findings from LiteLLM
- October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
Vulnerabilities
- GNUnet P2P Framework 0.26.2
- CVE-2026-110809 sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service
- CVE-2026-110809 sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service
- CVE-2026-110872