Skip to content
Sign in

Fri 30 Oct · updated 09:00 UTC

Today in security

77stories in 24 h22known exploited1federal deadline within 48 h7CVEs in the news

Today’s briefing

07:00 UTC edition

Read the briefing

Cisco and GitLab flaws enter CISA exploited-vulnerability catalogue

CISA added Cisco CVE-2026-76418 and GitLab CVE-2026-97229 to its Known Exploited Vulnerabilities catalogue on 29 October, with remediation deadlines of 1 November 2026. Cisco says its firewall flaw is being exploited, while CISA’s GitLab listing confirms active exploitation; neither source identifies the attackers or establishes ransomware use. The Alpine Linux GitLab attack was reported in the previous edition, but Alpine said it could not establish whether its server was compromised.

Known exploited22

CISA KEV entries named in the last 48 hours of coverage, by federal deadline

In CISA KEV
  • In CISA KEV

    LinuxCVE-2026-46300

    Federal deadline 31 Oct · In CISA KEV since 28 Oct

    7.8High16% EPSS11 articles

  • In CISA KEV

    Cisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareCVE-2026-76418

    Federal deadline 1 Nov · In CISA KEV since 29 Oct

    8.6High0.6% EPSS5 articles

  • In CISA KEV

    GitLabCVE-2026-97229

    Federal deadline 1 Nov · In CISA KEV since 29 Oct

    10.0Critical18% EPSS12 articles

  • In CISA KEV

    Google BrotliCVE-2026-111497

    Federal deadline 10 Nov · In CISA KEV since 27 Oct

    9.2Critical83% EPSS20 articles

  • In CISA KEV

    Adobe CommerceCVE-2026-48356

    Federal deadline 10 Nov · In CISA KEV since 27 Oct

    9.3Critical45% EPSS8 articles

  • In CISA KEV

    VMware Cloud FoundationCVE-2026-41709

    Federal deadline 11 Nov · In CISA KEV since 28 Oct

    2.7Low0.8% EPSS7 articles

Show 16 more · federal deadlines passed
  • In CISA KEV

    PHPCVE-2026-109618

    Federal deadline passed 29 Oct · In CISA KEV since 26 Oct

    9.2Critical99.9% EPSS53 articles

  • In CISA KEV

    PHPCVE-2026-109619

    Federal deadline passed 29 Oct · In CISA KEV since 26 Oct

    9.2Critical99.9% EPSS52 articles

  • In CISA KEV

    AhsayCBSCVE-2026-105133

    Federal deadline passed 17 Oct · In CISA KEV since 14 Oct

    7.5High79% EPSS9 articles

  • In CISA KEV

    AhsayCBSCVE-2026-105134

    Federal deadline passed 17 Oct · In CISA KEV since 14 Oct

    10.0Critical82% EPSS8 articles

  • In CISA KEV

    Ivanti Connect SecureCVE-2026-104935

    Federal deadline passed 16 Oct · In CISA KEV since 13 Oct

    8.6High87% EPSS16 articles

  • In CISA KEV

    Apple iOS and iPadOSCVE-2026-86950

    Federal deadline passed 13 Oct · In CISA KEV since 29 Sep

    8.8High26% EPSS17 articles

  • In CISA KEV

    Broadcom VMware vCenterCVE-2026-59310

    Federal deadline passed 21 Aug · In CISA KEV since 18 Aug · Used in ransomware campaigns

    9.8Critical2.6% EPSS12 articles

  • In CISA KEV

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)CVE-2026-20349

    Federal deadline passed 14 Aug · In CISA KEV since 11 Aug

    8.6High1.0% EPSS8 articles

  • In CISA KEV

    Arista VeloCloud OrchestratorCVE-2026-16812

    Federal deadline passed 30 Jul · In CISA KEV since 27 Jul

    10.0Critical1.8% EPSS9 articles

  • In CISA KEV

    Oracle E-Business SuiteCVE-2026-46817

    Federal deadline passed 18 Jul · In CISA KEV since 15 Jul

    9.8Critical12% EPSS9 articles

  • In CISA KEV

    Cisco Catalyst SD-WAN Controller and ManagerCVE-2026-20127

    Federal deadline passed 27 Feb · In CISA KEV since 25 Feb

    10.0Critical89% EPSS24 articles

  • In CISA KEV

    Sangoma FreePBXCVE-2019-19006

    Federal deadline passed 24 Feb · In CISA KEV since 3 Feb

    Not scored56% EPSS3 articles

  • In CISA KEV

    Oracle E-Business SuiteCVE-2025-61882

    Federal deadline passed 27 Oct 2025 · In CISA KEV since 6 Oct 2025 · Used in ransomware campaigns

    9.8Critical99.7% EPSS8 articles

  • In CISA KEV

    Sangoma FreePBXCVE-2025-57819

    Federal deadline passed 19 Sep 2025 · In CISA KEV since 29 Aug 2025

    10.0Critical95% EPSS2 articles

  • In CISA KEV

    Versa DirectorCVE-2024-39717

    Federal deadline passed 13 Sep 2024 · In CISA KEV since 23 Aug 2024

    6.6Medium4.0% EPSS1 article

  • In CISA KEV

    Adobe Commerce and Magento Open SourceCVE-2024-34102

    Federal deadline passed 7 Aug 2024 · In CISA KEV since 17 Jul 2024

    9.8Critical99.9% EPSS1 article

Latest news64

The last 24 hours, newest first; stories about known exploited CVEs are above

All news

Latest story at 08:16 UTC. Red diamonds mark the 9 stories about exploited CVEs.

Cisco fixes exploited VPN…3 outlets · exploited12:00Fri 30Now
  • 08:01 UTC. INJ3CTOR3 malware steals FreePBX credentials for toll fraud. 1 outlet. About an exploited CVE.
  • 08:00 UTC. ESET links Belarusian group to destructive attack in Ukraine. 1 outlet.
  • 07:30 UTC. Binance probe traces $6.36 billion hack to DevOps breach. 2 outlets.
  • 07:00 UTC. CyberDakait Android malware targets 17,960 Indian devices. 1 outlet.
  • 06:26 UTC. Hacker leaks personal data on 40,000 DHS employees. 1 outlet.
  • 06:26 UTC. Acronis details Qilin ransomware attacks on ESXi and healthcare. 1 outlet.
  • 05:31 UTC. Claude Code Adds Toggle for Unattended Destructive Commands. 1 outlet.
  • 04:14 UTC. Binance reports breach affecting $6.3 billion in assets. 1 outlet.
  • 03:36 UTC. Progress patches 15 WS_FTP Server flaws, including CVE-2026-84295. 1 outlet.
  • 03:31 UTC. WordPress Core flaw exploited to run code on vulnerable sites. 1 outlet.
  • 03:30 UTC. Anthropic and Pluto Security findings feature in SANS Stormcast. 1 outlet.
  • 02:57 UTC. Ivanti Connect Secure flaws exploited in zero day attacks. 1 outlet. About an exploited CVE.
  • 02:28 UTC. ServiceNow patches AI Platform flaw allowing host code execution. 1 outlet.
  • 01:55 UTC. Compromised analytics script drains Polymarket trader wallets. 1 outlet.
  • 01:43 UTC. Google Chrome 156 fixes 21 flaws, including critical bug. 1 outlet.
  • 01:41 UTC. Binance investigates suspected hot wallet breach and transfers. 1 outlet.
  • 01:22 UTC. Kaspersky uncovers NetamLoader supply chain attack on Asian government. 1 outlet.
  • 01:00 UTC. ThreatMon finds AhsayCBS webshells used to build SOCKS tunnels. 1 outlet. About an exploited CVE.
  • 00:41 UTC. Composer fixes path traversal and token leak flaws in new releases. 1 outlet.
  • 00:22 UTC. Veeam patches seven flaws, including critical remote code execution. 1 outlet.
  • 22:53 UTC. Binance Investigates Suspicious Crypto Transfers Worth $5.8 Billion. 1 outlet.
  • 22:06 UTC. Crime Stoppers breach leaves Canadian tip exposure unknown. 1 outlet.
  • 21:58 UTC. US Probes Suspected Cyberattack Behind Military Freezer Failures. 1 outlet.
  • 21:21 UTC. Cofense finds Anthropic phishing bypassing email security tools. 1 outlet.
  • 20:10 UTC. UNM Health investigates cyberattack after ransomware group claim. 1 outlet.
  • 20:07 UTC. Florida aid website breach may affect 4.9 million people. 1 outlet.
  • 19:59 UTC. RIZAP employee exposed 726 health records through personal AI chat. 1 outlet.
  • 19:55 UTC. Australia disrupts Amadey malware control of 180,000 computers. 1 outlet.
  • 19:45 UTC. Frontline Education breach exposes students’ sensitive data. 1 outlet.
  • 19:11 UTC. Fortinet patches critical flaws as new cyber threats emerge. 1 outlet.
  • 18:43 UTC. Researchers Find 18 Billion Files in Exposed Cloud Buckets. 1 outlet.
  • 18:15 UTC. Anthropic says Claude built exploits for major browsers and systems. 1 outlet.
  • 16:05 UTC. CISA adds VMware and Linux kernel flaws to exploited list. 1 outlet. About an exploited CVE.
  • 16:00 UTC. IDC names Microsoft a leader in enterprise endpoint security. 1 outlet.
  • 16:00 UTC. Microsoft reports North Korean groups expanding AI operations. 1 outlet.
  • 15:57 UTC. Linux TCP flaw rated 9.8 puts Ubuntu and Red Hat at risk. 2 outlets.
  • 15:44 UTC. Drupal Commerce flaw exploited to bypass access controls. 1 outlet.
  • 15:44 UTC. Vaughn outlines a four question approach to threat modelling. 1 outlet.
  • 15:20 UTC. Fake ChatGPT and Claude Apps Deploy Cryptocurrency Miners. 1 outlet.
  • 15:01 UTC. Google says Gemini 4 Carbon excels at finding software flaws. 1 outlet.
  • 15:00 UTC. Researchers warn US voting systems remain vulnerable to attack. 1 outlet.
  • 15:00 UTC. NIK C2 Malware Uses Victims’ OpenAI Keys for AI Queries. 1 outlet.
  • 14:18 UTC. Cisco Open Sources Quarry to Detect Hidden AI Agent Attacks. 1 outlet.
  • 14:06 UTC. Malicious Firefox add-ons steal secrets from crypto wallets. 1 outlet.
  • 14:03 UTC. Google unveils Gemini 4 Carbon with advanced security. 1 outlet.
  • 14:00 UTC. CREST calls for coordinated cyber resilience across finance. 1 outlet.
  • 13:42 UTC. Adobe, Veeam and Juniper patch critical product flaws. 1 outlet. About an exploited CVE.
  • 13:42 UTC. Google says Gemini 4 Carbon leads benchmarks for cyber tasks. 1 outlet.
  • 13:26 UTC. BAE Says No Data Was Taken in Bankruptcy Court Outage. 1 outlet.
  • 13:00 UTC. AppViewX launches standalone quantum cryptography risk platform. 1 outlet.
  • 12:55 UTC. Cloudflare reports mid-range DDoS attacks surged 208% in Q3. 1 outlet.
  • 12:54 UTC. DHS Employee Data Leak Exposes Records of 41,000 People. 3 outlets.
  • 11:39 UTC. Wiz webinar outlines readiness for faster AI driven attacks. 1 outlet.
  • 11:39 UTC. Telegram Android flaw could run code when users answer calls. 1 outlet.
  • 11:33 UTC. AI is reshaping security operations and creating a new role. 1 outlet.
  • 11:33 UTC. Researcher Finds 26,400 Live Credentials in Public Gitee Repos. 2 outlets.
  • 11:15 UTC. Akamai report finds online scams doubled and overtook phishing. 1 outlet.
  • 11:03 UTC. Apple backports fix for exploited flaw to older iPhones and iPads. 1 outlet. About an exploited CVE.
  • 11:00 UTC. So-net says hackers stole 2.6 million subscriber records. 1 outlet.
  • 10:34 UTC. Lumen links Volt Typhoon to attacks using Silent Train. 1 outlet.
  • 10:30 UTC. ICO reprimands Staffordshire Police over domestic abuse data breach. 1 outlet.
  • 10:29 UTC. Cisco SD WAN flaw tied to UAT-11473 and Volt Typhoon. 1 outlet. About an exploited CVE.
  • 10:26 UTC. GitHub launches npm firewall to block malicious packages. 1 outlet.
  • 10:00 UTC. AI relay disables security sandboxes in Codex and Claude Code. 1 outlet.
  • 09:47 UTC. Cisco fixes exploited VPN flaw that can crash firewalls. 3 outlets. About an exploited CVE.
  • 09:45 UTC. NIST sets federal agencies on course for post quantum shift. 1 outlet.
  • 09:21 UTC. Study finds 42% of US county election sites lack .gov domains. 1 outlet.
  • 09:05 UTC. Attacker Targets Alpine Linux GitLab Server With CVE-2026-97229. 2 outlets. About an exploited CVE.
  • Known exploited CVE
  • CVE not in KEV
  • Other story
  • Size: outlets on the story
  • Stories an hour
Show as table
Stories in the last 24 hours
Time (UTC)StoryOutletsType
08:01INJ3CTOR3 malware steals FreePBX credentials for toll fraud1Known exploited
08:00ESET links Belarusian group to destructive attack in Ukraine1Other
07:30Binance probe traces $6.36 billion hack to DevOps breach2Other
07:00CyberDakait Android malware targets 17,960 Indian devices1Other
06:26Hacker leaks personal data on 40,000 DHS employees1Other
06:26Acronis details Qilin ransomware attacks on ESXi and healthcare1Other
05:31Claude Code Adds Toggle for Unattended Destructive Commands1Other
04:14Binance reports breach affecting $6.3 billion in assets1Other
03:36Progress patches 15 WS_FTP Server flaws, including CVE-2026-842951CVE
03:31WordPress Core flaw exploited to run code on vulnerable sites1Other
03:30Anthropic and Pluto Security findings feature in SANS Stormcast1Other
02:57Ivanti Connect Secure flaws exploited in zero day attacks1Known exploited
02:28ServiceNow patches AI Platform flaw allowing host code execution1CVE
01:55Compromised analytics script drains Polymarket trader wallets1Other
01:43Google Chrome 156 fixes 21 flaws, including critical bug1CVE
01:41Binance investigates suspected hot wallet breach and transfers1Other
01:22Kaspersky uncovers NetamLoader supply chain attack on Asian government1Other
01:00ThreatMon finds AhsayCBS webshells used to build SOCKS tunnels1Known exploited
00:41Composer fixes path traversal and token leak flaws in new releases1Other
00:22Veeam patches seven flaws, including critical remote code execution1CVE
22:53Binance Investigates Suspicious Crypto Transfers Worth $5.8 Billion1Other
22:06Crime Stoppers breach leaves Canadian tip exposure unknown1Other
21:58US Probes Suspected Cyberattack Behind Military Freezer Failures1Other
21:21Cofense finds Anthropic phishing bypassing email security tools1Other
20:10UNM Health investigates cyberattack after ransomware group claim1Other
20:07Florida aid website breach may affect 4.9 million people1Other
19:59RIZAP employee exposed 726 health records through personal AI chat1Other
19:55Australia disrupts Amadey malware control of 180,000 computers1Other
19:45Frontline Education breach exposes students’ sensitive data1Other
19:11Fortinet patches critical flaws as new cyber threats emerge1Other
18:43Researchers Find 18 Billion Files in Exposed Cloud Buckets1Other
18:15Anthropic says Claude built exploits for major browsers and systems1Other
16:05CISA adds VMware and Linux kernel flaws to exploited list1Known exploited
16:00IDC names Microsoft a leader in enterprise endpoint security1Other
16:00Microsoft reports North Korean groups expanding AI operations1Other
15:57Linux TCP flaw rated 9.8 puts Ubuntu and Red Hat at risk2CVE
15:44Drupal Commerce flaw exploited to bypass access controls1CVE
15:44Vaughn outlines a four question approach to threat modelling1Other
15:20Fake ChatGPT and Claude Apps Deploy Cryptocurrency Miners1Other
15:01Google says Gemini 4 Carbon excels at finding software flaws1Other
15:00Researchers warn US voting systems remain vulnerable to attack1Other
15:00NIK C2 Malware Uses Victims’ OpenAI Keys for AI Queries1Other
14:18Cisco Open Sources Quarry to Detect Hidden AI Agent Attacks1Other
14:06Malicious Firefox add-ons steal secrets from crypto wallets1Other
14:03Google unveils Gemini 4 Carbon with advanced security1Other
14:00CREST calls for coordinated cyber resilience across finance1Other
13:42Adobe, Veeam and Juniper patch critical product flaws1Known exploited
13:42Google says Gemini 4 Carbon leads benchmarks for cyber tasks1CVE
13:26BAE Says No Data Was Taken in Bankruptcy Court Outage1Other
13:00AppViewX launches standalone quantum cryptography risk platform1Other
12:55Cloudflare reports mid-range DDoS attacks surged 208% in Q31Other
12:54DHS Employee Data Leak Exposes Records of 41,000 People3Other
11:39Wiz webinar outlines readiness for faster AI driven attacks1Other
11:39Telegram Android flaw could run code when users answer calls1Other
11:33AI is reshaping security operations and creating a new role1Other
11:33Researcher Finds 26,400 Live Credentials in Public Gitee Repos2Other
11:15Akamai report finds online scams doubled and overtook phishing1Other
11:03Apple backports fix for exploited flaw to older iPhones and iPads1Known exploited
11:00So-net says hackers stole 2.6 million subscriber records1Other
10:34Lumen links Volt Typhoon to attacks using Silent Train1Other
10:30ICO reprimands Staffordshire Police over domestic abuse data breach1Other
10:29Cisco SD WAN flaw tied to UAT-11473 and Volt Typhoon1Known exploited
10:26GitHub launches npm firewall to block malicious packages1Other
10:00AI relay disables security sandboxes in Codex and Claude Code1Other
09:47Cisco fixes exploited VPN flaw that can crash firewalls3Known exploited
09:45NIST sets federal agencies on course for post quantum shift1Other
09:21Study finds 42% of US county election sites lack .gov domains1Other
09:05Attacker Targets Alpine Linux GitLab Server With CVE-2026-972292Known exploited
  • North Korea’s TraderTraitor linked to $6.36 billion Binance heist

    Binance, the world’s largest cryptocurrency exchange, reports a record-breaking crypto heist with initial estimates around $6.3 billion, with on-chain analysts at TRM Labs calculating about $6.36 billion siphoned from…

    SecurityWeek

  • Linux kernel flaw could give attackers remote root access

    SecurityOnline[.]info reports a Linux kernel flaw, CVE-2026-98432, described by the outlet as a severe privilege-escalation vulnerability that could enable unauthenticated remote code execution. The article states…

    SecurityOnlineCVE-2026-98432

  • ESET links Belarusian group to destructive attack in Ukraine

    Researchers say the first destructive cyberattack attributed to a Belarus-aligned threat actor targeting a critical Ukrainian site marks a notable shift in the region’s cyber operations. ESET’s APT Activity Report for…

    Dark Reading

  • Binance probe traces $6.36 billion hack to DevOps breach

    Binance says its investigation into the October 2026 exploits points to a DevOps compromise followed by abuse of internal signing infrastructure. Officials confirmed that attackers first accessed a DevOps laptop, then…

    SecurityOnline

  • CyberDakait Android malware targets 17,960 Indian devices

    Group-IB has uncovered a sizeable CyberDakait Android malware operation that has compromised at least 17,960 Android devices across India since mid-2025. The campaign combines seven Android trojan families—cyb3rx,…

    SecurityOnline

  • Hacker leaks personal data on 40,000 DHS employees

    A hacker using the name Department of Peace has published personal and work contact details for more than 40,000 US Department of Homeland Security (DHS) employees. The leaked records include names, job titles, email…

    Security Affairs

  • Acronis details Qilin ransomware attacks on ESXi and healthcare

    Acronis Threat Research Unit has analysed a Rust-based Qilin ransomware build after the group claimed more than 1,000 victims in 2025 and over 900 additional victims in 2026. The operation, attributed to a…

    SecurityOnline

  • Claude Code Adds Toggle for Unattended Destructive Commands

    Anthropic has released Claude Code version 2.1.311 with a new environment variable that tightens permission controls for headless environments but also enables dangerous unattended execution. The toggle, named…

    SecurityOnline

  • Binance reports breach affecting $6.3 billion in assets

    Binance has disclosed a security incident affecting around $6.3 billion of assets on its platform, with about $3 billion already frozen on-chain. The exchange said there is no evidence that wallet private keys were…

    The Hacker News

  • Progress patches 15 WS_FTP Server flaws, including CVE-2026-84295

    Progress Software released security updates addressing 15 WS_FTP Server vulnerabilities on 29 October 2026. The most severe flaw, CVE-2026-84295, carries a maximum 10.0 CVSS score and allows unauthenticated attackers…

    SecurityOnlineCVE-2026-84295

  • WordPress Core flaw exploited to run code on vulnerable sites

    Wordfence warned on 29 October 2026 that threat actors are actively exploiting a critical WordPress Core vulnerability in the wild. The flaw affects WordPress Core versions 4.7 through 7.1.3 and allows unauthenticated…

    SecurityOnline

  • Anthropic and Pluto Security findings feature in SANS Stormcast

    On 30 October 2026, SANS ISC’s Stormcast notes a feature about using a Ghidra server to accompany malware analysis. Xavier’s diary explains setting up a Ghidra server so samples can be uploaded and versioned across VM…

    SANS ISC

Show 50 more of 52

CVEs in the news7

Named in the last 24 hours and not in CISA KEV, most covered first

CVE tracker

  • CVE-2026-98432Linux Linux

    2 articles today · Linux kernel flaw could give attackers remote root access

    9.8Critical0.4% EPSS · 4 articles

  • CVE-2026-84295Progress Software WS_FTP Server

    Progress patches 15 WS_FTP Server flaws, including CVE-2026-84295

    10.0Critical1 article

  • CVE-2026-103093ServiceNow ServiceNow AI Platform

    ServiceNow patches AI Platform flaw allowing host code execution

    9.4Critical1 article

  • CVE-2023-22793Veeam Management Pack for Microsoft System Center

    Veeam patches seven flaws, including critical remote code execution

    9.3Critical1 article

  • CVE-2026-33096Microsoft Windows 11 version 23H2

    Google says Gemini 4 Carbon leads benchmarks for cyber tasks

    7.5High1.2% EPSS · 3 articles

  • CVE-2026-76024Google Chrome

    Google Chrome 156 fixes 21 flaws, including critical bug

    Not scored1 article
Show 1 more

Developing stories5

Two or more articles in the last 24 hours; each bead is an article

  • In CISA KEVCVECVE-2026-97229GitLab
    Developinglatest 2 hours ago3 articles2 outlets
    29 Oct · The Hacker News first30 OctNow
    • Thu 29 Oct, 09:05 UTC. The Hacker News, first report. Attacker Targets Alpine Linux GitLab Server With CVE-2026-97229. Cites a CVE in CISA KEV.
    • Thu 29 Oct, 20:01 UTC. CISA, its first report on the story. CISA Adds Actively Exploited GitLab Code Execution Flaw to KEV. Cites a CVE in CISA KEV.
    • Fri 30 Oct, 07:27 UTC. The Hacker News. CISA Adds Exploited GitLab and Cisco Flaws to KEV. Cites a CVE in CISA KEV.
  • In CISA KEVCVECVE-2026-76418Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
    Developinglatest 13 hours ago3 articles3 outlets
    29 Oct · SecurityWeek first30 OctNow
    • Thu 29 Oct, 09:47 UTC. SecurityWeek, first report. Cisco fixes exploited VPN flaw that can crash firewalls. Cites a CVE in CISA KEV.
    • Thu 29 Oct, 10:44 UTC. The Hacker News, its first report on the story. Cisco patches actively exploited VPN flaw that can crash firewalls. Cites a CVE in CISA KEV.
    • Thu 29 Oct, 20:01 UTC. CISA, its first report on the story. CISA adds actively exploited Cisco firewall flaw to KEV catalogue. Cites a CVE in CISA KEV.
  • Threat actorSilent Chollima
    Developinglatest 13 hours ago3 articles3 outlets
    29 Oct · SecurityWeek first30 OctNow
    • Thu 29 Oct, 12:54 UTC. SecurityWeek, first report. DHS Employee Data Leak Exposes Records of 41,000 People.
    • Thu 29 Oct, 12:58 UTC. Ars Technica, its first report on the story. Leak exposes 41,000 DHS workers, including undercover ICE agents.
    • Thu 29 Oct, 19:41 UTC. DataBreaches, its first report on the story. DHS personnel leak exposes details of more than 41,000 staff.
  • Threat actorTraderTraitor
    Developinglatest 47 minutes ago2 articles2 outlets
    30 Oct · SecurityOnline firstNow
    • Fri 30 Oct, 07:30 UTC. SecurityOnline, first report. Binance probe traces $6.36 billion hack to DevOps breach.
    • Fri 30 Oct, 08:16 UTC. SecurityWeek, its first report on the story. North Korea’s TraderTraitor linked to $6.36 billion Binance heist.
  • CVECVE-2026-98432Linux
    Developinglatest 1 hour ago2 articles2 outlets
    29 Oct · The Hacker News first30 OctNow
    • Thu 29 Oct, 15:57 UTC. The Hacker News, first report. Linux TCP flaw rated 9.8 puts Ubuntu and Red Hat at risk.
    • Fri 30 Oct, 08:00 UTC. SecurityOnline, its first report on the story. Linux kernel flaw could give attackers remote root access.

Preview1 of 93

In CISA KEVKnown exploitedLinux

CISA adds VMware and Linux kernel flaws to exploited list

Security Affairs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-41709, described as an insufficient logging vulnerability in Broadcom VMware ESX, and CVE-2026-46300, a Linux kernel flaw…

CVE-2026-46300CVE page
15.7%probability of exploitation in the next 30 days
96th percentile
050100

Higher than 96% of CVEs

7.8HighCVSS
LowHigh
  • In CISA KEVExploited in the wild · in CISA KEV since 28 Oct
  • Federal deadline Sat 31 Oct
  • 11 articles in coverage
Read summaryOriginal
CyberSIXTSignal over noise
Updated AboutDevelopersSign in