News
- Ledger asks sellers across Asia to halt sales after supply-chain attack
- Cisco patches new Secure Email Gateway zero-day exploited in attacks
- Spyware manufacturer had access to data harvested by former Polish government, current PM says
- U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
Malware
- AI worms could spread across your smart devices, Anthropic warns
- Update Windows: Record Patch Tuesday fixes flaw already under attack
- Fake Calendly “Meta Careers” pages steal Facebook and Google logins
- Police receive fake murder tip from Anthropic’s Claude AI
Threat Actors
- Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
- Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
- When LLM Gateways Go Wrong: Findings from LiteLLM
- U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
Vulnerabilities
- GNUnet P2P Framework 0.26.2
- CVE-2026-109527 Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies
- CVE-2026-109527 Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies
- CVE-2026-86849 Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto