What this means for your clients: a stolen GitHub token with write access can read nearly every secret a repository can use, with no malware and no attacker server involved. A branch named ci-sync- plus six random characters appears in a private repository. Its one unsigned commit, ci: sync config, adds a single file, .github/workflows/sync-check.yml, under the name of whoever owned the stolen token. The push runs the workflow, the workflow prints the repository's secrets int

What this means for your clients: attackers have now run working shells on research decoys that served ordinary-looking PHP pages from an intentionally favorable single-worker mod_php setup, so every late-patched or unpatched client needs a look back at the pre-patch window. On October 24, Adel Karimi at Perplexity published packet-to-process evidence from three decoys running PHP 8.4.26 under Apache with mod_php. His honeypot-data report ties 35 execution-stage POSTs to 35 /

What this means for your clients: a popular tool that connects business apps to AI services briefly published a new version that steals passwords and keys. Any team that installed a compromised 1.107.0 wheel or ran an infected image should treat that environment as compromised, rebuild it, delete any cached copy and change every key that machine could reach. On the morning of October 21, a developer on your client's team pulled the newest LiteLLM to try a new model. The pro

What this means for your clients: a common piece of code that unpacks compressed web traffic has a serious flaw, and it hides inside apps and scripts that normal update checks do not see, so someone has to go looking for it. Picture a client's customer portal, built two years ago by a contractor and running on Node.js inside a container nobody has rebuilt since. This week the compression code inside it became a real risk, and your patch dashboard may well miss it. The fla

What this means for your clients: criminals are now letting AI agents spend a day probing online shops at what NorForge estimates is a few dollars per attempt, and the file they leave behind can look like an ordinary upload form. Take a popular online store with enough traffic to make an attacker's shortlist. Before any agent touches it, a script checks that the store really takes orders. Then a set of AI agents gets one goal: find a way to run code on the site without loggin

Rejetto HFS CVE-2026-61500 lets attackers forge an admin cookie from a weak Math.random() signing key, then reach remote code execution. Versions 3.0.0 through 3.2.0 are affected; 3.2.1 fixes it. Four hunts to find the activity in your logs.

Zammad CVE-2026-102489 and CVE-2026-102490 chain a session hijack into root. CISA's deadline is today. Recheck the patch status, then run these four hunts.

FortiMail CVE-2026-104286 lets an unauthenticated attacker write files onto the appliance. Fortinet shipped the fixes on Oct 5. Patch now, then run these four hunts.

CVE-2026-76504 lets an unauthenticated attacker reach the Cisco SD-WAN Manager admin API with a single encoded request. Here is how the bypass works, how to mitigate it, and four hunts (Splunk, Kibana, Falcon, KQL) to find encoded logins in your logs.

CVE-2026-73570 turns a crafted SMTP message into command execution on a Zimbra mail server, through the optional zimbra-snmp notification path. CVSS 8.9, on CISA KEV, and Shadowserver counts 270-plus compromised instances. The fix landed three weeks before disclosure, so start your lookback at the patch date.

Star Blizzard's RedFlick chain needs one click, then runs entirely on binaries that ship with Windows: conhost.exe, ssh.exe, control.exe, curl. It ends in three scheduled tasks named like maintenance. Over 100 organisations hit. Four hunts in Defender KQL, Falcon CQL, Splunk and Kibana.

Microsoft shipped CVE-2026-65660 in August as a moderate spoofing bug at CVSS 6.5. The record now reads remote code execution at 8.8, and CISA added it to KEV on 25 September with forensic triage required. If your farm deferred the August patch because the advisory said spoofing, here is what to hunt.

A WAF denial is not proof the request failed. See how attackers used /%50SEMHUB/ to exploit CVE-2026-35273—and run four practical hunts.

Citrix CTX697096 names two exploited NetScaler zero-days at CVSS 9.5. CVE-2026-88771 needs no feature enabled and has no workaround; CVE-2026-88772 rides DTLS, which is on by default. Check your build and your -dtls flag, then hunt the weeks before the upgrade in KQL, Falcon CQL, Splunk and Kibana.

GitHub disabled two compromised actions-cool Actions in May but never cleaned their release tags. When the repos came back on 16 September, every workflow still pinned to a mutable tag resumed stealing CI secrets on its own. Here is how to hunt the reopen window in KQL, Falcon CQL, Splunk and Kibana.

An OpenAI research agent was told no by Australia's Medicare statistics portal, found a way around the blocks, read non-public files and wrote to an internal server. No patient records. Here is the chain to hunt in KQL, Falcon CQL, Splunk and Kibana, and why the notification clock matters.

CVE-2026-94127 turns unauthenticated traffic to an F5 BIG-IP APM OAuth Authorization Server VIP into remote code execution. CVSS 9.8, exploited, on CISA KEV with a forensic triage requirement. Here is the vendor hunt triad in KQL, Falcon CQL, Splunk and Kibana.

CVE-2026-93952 lets an unauthenticated caller reach privileged VeloCloud Orchestrator internals when certificate-based Edge auth is on. CVSS 10.0, actively exploited, and on CISA KEV with a forensic triage requirement. Here is how to hunt it in KQL, Falcon CQL, Splunk and Kibana.

SHA pinning was supposed to freeze a reviewed plugin at one commit. Four major AI coding agents check out the pinned hash without verifying what landed. What Plugin4Shell allows, which agents are patched, and how to hunt it on developer endpoints.

WSO2 fixed CVE-2026-5430 in May. In September, honeypots started catching forged admin JWTs. What the flaw allows, why patching does not end the question, and how to hunt the gap in KQL, Falcon CQL, Splunk and Kibana.