What this means for your clients: an add-on with a trusted brand name ran in a developer's session and tried to open a way back in. Developer laptops often hold code and cloud credentials. On October 29, anyone who installed or updated Claude Code in Cursor's extension marketplace may have received a fake Claude Code extension, tampered Anthropic.claude-code 2.1.312 or 2.1.313 that Cursor says Anthropic did not develop. Cursor says those macOS and Windows builds were availabl

What this means for your clients: attackers went after a flaw in self-hosted GitLab code servers, and Alpine Linux stayed exposed after two upgrades, the second because the fix also depends on the Ruby that GitLab runs on. Alpine Linux upgraded GitLab after the fix shipped and was still exposed. On October 20 and 21 a new account sent crafted CI configurations and crashed GitLab workers eight times, getting partway through the exploit in four. Alpine found no evidence that co

What this means for your clients: attackers are using a flaw in Cisco's remote-access firewalls to force them to restart. The fix is a software upgrade, plus checking each VPN connection profile for one setting. The VPN login page on a Cisco ASA or FTD can be used to crash the firewall. A device is exposed when secondary authentication is set on a tunnel group it serves: with the login page's group list on, that is any tunnel group, including the default group, DefaultWEBVPNG

What this means for your clients: a Magento store can look patched and still send shoppers' browsers to an attacker domain, because the loader often sits in the database rather than in a scanned file. A client's Magento storefront passes a routine file scan. Then a shopper's browser loads a script from deepveindrilling[.]com, and the next stage decides whether that visitor looks like a real buyer or a scanner. That is the PolyShell Magento problem Sansec has been tracking. Po

What this means for your clients: if one laptop or web server on their private Tailscale network is taken over, the remote access rules they set for convenience may decide how far that foothold spreads, so update every device. Picture a client tailnet with a build box that runs Docker and a contractor laptop that can SSH into it. The laptop picks up an infostealer. Until this week, that one SSH rule with forwarding was enough, according to the researcher, to reach the build b

What this means for your clients: a stolen GitHub token with write access can read nearly every secret a repository can use, with no malware and no attacker server involved. A branch named ci-sync- plus six random characters appears in a private repository. Its one unsigned commit, ci: sync config, adds a single file, .github/workflows/sync-check.yml, under the name of whoever owned the stolen token. The push runs the workflow, the workflow prints the repository's secrets int

Update, 30 October: CISA added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities catalog on October 26. On October 28 it added the Linux kernel flaw CVE-2026-46300, and CISA's KEV entry says that flaw can be chained with both PHP bugs to implant PHP webshells and run commands as root. Dream Research, which calls the kernel flaw Fragnesia, reports a campaign that did exactly that: a custom PHP2Shell exploit plus Fragnesia rooted 25 Palo Alto Networks P

What this means for your clients: a popular tool that connects business apps to AI services briefly published a new version that steals passwords and keys. Any team that installed a compromised 1.107.0 wheel or ran an infected image should treat that environment as compromised, rebuild it, delete any cached copy and change every key that machine could reach. On the morning of October 21, a developer on your client's team pulled the newest LiteLLM to try a new model. The pro

What this means for your clients: a common piece of code that unpacks compressed web traffic has a serious flaw, and it hides inside apps and scripts that normal update checks do not see, so someone has to go looking for it. Picture a client's customer portal, built two years ago by a contractor and running on Node.js inside a container nobody has rebuilt since. This week the compression code inside it became a real risk, and your patch dashboard may well miss it. The fla

What this means for your clients: if a firewall was open to the internet, attackers may already hold a copy of the passwords stored inside it, so installing the update is only half the job and those passwords need to be changed too. Picture a hypothetical client firewall: patched, ticket closed. Two weeks before the patch, someone downloaded its configuration file, and that copy now sits on a machine you will never see. Inside it are the bind account passwords the firewall us

What this means for your clients: in our sandbox we built the last vulnerable and first fixed PHP 8.5 releases and sent the advisory's own trigger to both under Apache mod_php. On the vulnerable build the Zend memory manager flagged its own heap as corrupted and the worker aborted. On the fixed build the same input was handled cleanly and the worker stayed up. That is strong evidence the update works, not proof against every attack path, so patch now. Update, Oct 24, 2026: We

Update, 30 October: CISA added both PHP2Shell CVEs to its Known Exploited Vulnerabilities catalog on October 26. Dream Research reports a campaign that chained a custom PHP2Shell exploit with the Linux kernel flaw CVE-2026-46300, which it calls Fragnesia, and rooted 25 Palo Alto Networks PAN-OS firewall and management servers. Dream says the attacker targeted the PAN-OS 12.1 and 12.2 branches running PHP 8.0.30, and that the exploit was built for PAN-OS and was not a copy of

What this means for your clients: criminals are now letting AI agents spend a day probing online shops at what NorForge estimates is a few dollars per attempt, and the file they leave behind can look like an ordinary upload form. Take a popular online store with enough traffic to make an attacker's shortlist. Before any agent touches it, a script checks that the store really takes orders. Then a set of AI agents gets one goal: find a way to run code on the site without loggin

What this means for your clients: any client website that switched on a Rank Math PRO 3.0.123 copy downloaded or updated during the affected window on October 15 or 16 should be treated as hacked, and installing the newer version alone does not clean it up. Picture a small agency that looks after a stack of client sites, every one running the same premium WordPress plugin, with updates switched on. On a Thursday afternoon, the agency's scheduled update job pulls the latest bu

A small office runs Nextcloud on one server, and staff edit spreadsheets in the browser without asking how. It works because of one optional app, added from the app store long ago, that downloads a copy of a document server and runs it on the same box. Most days nobody thinks about it. When the machine restarts, there is a short stretch before that bundled server is back, and during it the app's plain PHP file tries to start the server again with each request that comes in. C

Picture an admin opening the Microsoft Entra sign-in logs on a Friday evening and finding a sign-in from an app the company approved long ago. There is no user, no device and no MFA prompt. The source is a hosting provider address, not Microsoft's network. Nobody in the tenant clicked anything, and nobody in the tenant held the credential that signed in. ConnectWise says it identified unauthorized access to application identities associated with its Cloud Backup environment,

A help desk technician starts a remote session to fix a laptop, and the tool does its job. Behind that session sits one appliance that holds the access for everything the help desk can reach. Mandiant says root on it gives an attacker access to every credential the appliance stores or brokers, and both Mandiant and BeyondTrust say this actor deleted logs. The box is the last place to ask what happened. BeyondTrust published advisory BT26-05 on 15 October 2026 for CVE-2026-102

A mail gateway reads every inbound attachment so nobody else has to. Cisco says one crafted attachment passing through an affected gateway can give an unauthenticated sender root. Nobody has to open it. That same root access can tidy the logs on the box, so the box is the last place to ask what happened. Cisco published advisory cisco-sa-esa-afw-zqYJkjxp on 14 October 2026 for CVE-2026-76519, a Critical Secure Email Gateway arbitrary file write bug in the Advanced Malware Pro

Picture someone in finance opening a file that arrived in a chat message. There is no yellow bar, no "this file came from the internet" prompt and no SmartScreen warning. If something runs next, nothing on the screen tells them, and nothing tells you either. Microsoft released CVE-2026-96951 on 13 October 2026 as a Windows Shell Security Feature Bypass Vulnerability, marked Exploited: Yes and Publicly disclosed: No. CISA added it to the Known Exploited Vulnerabilities catalog

An account-renaming sequence on a domain controller lasted only seconds. By the time it ended, the intrusion had moved from the use of an existing domain account to authentication as Administrator. Within another 12 minutes, the attacker had created a new Domain Admin account. The next morning, files were being encrypted. This case traces an intrusion involving activity consistent with noPac exploitation, an attacker-installed ScreenConnect service, PowerShell discovery, rclo