THE SECURITY STANDARD Sunday, 1 November 2026, 07:53 UTC · https://hippiekiller.net ============================================================================== Last 24 hours: 86 CVEs, 51 advisories, 0 with confirmed exploitation. Sources: 98 enabled, 1 degraded. Last ingestion 22m ago. KNOWN EXPLOITED (CISA KEV, LAST THREE WEEKS) ------------------------------------------------------------------------------ CVE-2026-118527 Ivanti Connect Secure Generation of P due 2026-11-13 (12d) CVE-2026-111357 Ivanti Connect Secure Missing Authenti due 2026-11-02 (1d) CVE-2026-76418 Cisco Secure Firewall ASA Software and due 2026-11-01 (0d) CVE-2026-97229 GitLab Community Edition and Enterpris due 2026-11-01 (0d) CVE-2026-46300 Linux Kernel Missing Initialization due 2026-10-31 OVERDUE CVE-2026-41709 Broadcom VMWare ESX Insufficient Logg due 2026-11-11 (10d) CVE-2026-48356 Adobe Commerce and Magento Unrestricte due 2026-11-10 (9d) CVE-2026-111497 Google Brotli Unchecked Return Value V due 2026-11-10 (9d) CVE-2026-109619 PHP Stale Internal Request-State Vu due 2026-10-29 OVERDUE CVE-2026-109618 PHP Memory Corruption Vulnerability due 2026-10-29 OVERDUE CVE-2026-114625 Arista VeloCloud Orchestrator SQL I due 2026-10-26 OVERDUE CVE-2026-110447 Collabora Online – Built-in CODE Se due 2026-10-26 OVERDUE TOP OF THE WIRE ------------------------------------------------------------------------------ [91] Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability CISA KEV · KEV · CVE-2026-118527 · 2d ago Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can https://nvd.nist.gov/vuln/detail/CVE-2026-118527 [87] Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability NVD · KEV · CVSS 8.6 · CVE-2026-76418 · 3d ago Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, r https://nvd.nist.gov/vuln/detail/CVE-2026-76418 [86] Linux Kernel Missing Initialization of a Variable Vulnerability CISA KEV · KEV · CVE-2026-46300 · 4d ago Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ES https://nvd.nist.gov/vuln/detail/CVE-2026-46300 [81] CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder Rapid7 · CVSS 9.2 · exploited · CVE-2026-111497 · 5d ago Overview On October 21, 2026, the Node.js Project published a security advisory for CVE-2026-111497 , an out-of-bounds write in the Brotli decoder bundled with Node.js. The vulnerability affects the Node.js 26.x , 24.x , and 22.x release li https://rapid7.com/blog/post/etr-cve-2026-111497-critical-out-of-bounds-write-in-the-node-js-brotli-decoder [80] Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CISA KEV · KEV · CVE-2026-48356 · 5d ago Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the vi https://nvd.nist.gov/vuln/detail/CVE-2026-48356 [79] php2shell one week later: Why one exploit doesn’t work everywhere Tenable · CVSS 9.2 · exploited · CVE-2026-109618, CVE-2026-109619 · 2d ago php2shell raised fears of mass exploitation. A week of testing by our research team found that working exploits had to be fitted to each target’s exact PHP setup. Systems that share one build, such as network appliances, are the exception: https://tenable.com/blog/php2shell-one-week-later-why-one-exploit-doesnt-work-everywhere [77] CISA Adds Two Known Exploited Vulnerabilities to Catalog CISA · exploited · CVE-2026-97229, CVE-2026-76418 · 2d ago CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerabil https://cisa.gov/news-events/alerts/2026/10/29/cisa-adds-two-known-exploited-vulnerabilities-catalog [75] Broadcom VMWare ESX Insufficient Logging Vulnerability CISA KEV · KEV · CVE-2026-41709 · 4d ago Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged. https://nvd.nist.gov/vuln/detail/CVE-2026-41709 [71] CISA Adds Two Known Exploited Vulnerabilities to Catalog CISA · exploited · CVE-2026-111357, CVE-2026-118527 · 43h ago CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-202 https://cisa.gov/news-events/alerts/2026/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog [69] CISA Adds Two Known Exploited Vulnerabilities to Catalog CISA · exploited · CVE-2026-48356, CVE-2026-111497 · 4d ago CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability https://cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog [66] CISA Adds Two Known Exploited Vulnerabilities to Catalog CISA · exploited · CVE-2026-41709, CVE-2026-46300 · 3d ago CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux Kernel Missin https://cisa.gov/news-events/alerts/2026/10/28/cisa-adds-two-known-exploited-vulnerabilities-catalog [66] Node2Shell CVEs Fortinet PSIRT · CVSS 9.8 · CVE-2026-105482, CVE-2026-105483 · 6d ago CVSSv3 Score: 9.8 CVE-2026-105482 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105483 - (high)This vulnerability affects Node.js 26.x and 24.x.CVE-2026-106069 - (high)This vulnerability affects Node.js 26.x, 24.x https://fortiguard.fortinet.com/psirt/FG-IR-26-187 ADVISORIES ------------------------------------------------------------------------------ [53] Vulnerabilities in Node.js Affecting Cisco Products: October 2026 Cisco PSIRT · CVE-2026-111497, CVE-2026-105482 · 4d ago https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-oct2026-node-js-Jj3SQ19u [51] Chromium: CVE-2026-118304 Improper input validation in SVG MSRC · CVE-2026-118304 · 17h ago https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118304 [51] Chromium: CVE-2026-118316 Improper input validation in V8 MSRC · CVE-2026-118316 · 17h ago https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118316 [51] Chromium: CVE-2026-118310 Improper input validation in Views MSRC · CVE-2026-118310 · 17h ago https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118310 [51] Chromium: CVE-2026-118328 Improper input validation in WebRTC MSRC · CVE-2026-118328 · 17h ago https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118328 [51] Chromium: CVE-2026-118332 Improper input validation in Compositing MSRC · CVE-2026-118332 · 17h ago https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118332 [51] Chromium: CVE-2026-118331 Improper input validation in FileAPI MSRC · CVE-2026-118331 · 17h ago https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118331 [51] Chromium: CVE-2026-118329 Improper input validation in ANGLE MSRC · CVE-2026-118329 · 17h ago https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118329 RESEARCH & THREAT INTELLIGENCE ------------------------------------------------------------------------------ [19] Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer Talos · 19h ago https://blog.talosintelligence.com/appraisal-by-ai-model-driven-victim-prioritization-in-the-volta-infostealer [24] Wireshark 5.0.0rc1 Release SANS ISC · 21h ago https://isc.sans.edu/diary/rss/33476 [19] YARA-X 1.22.1 Release SANS ISC · 21h ago https://isc.sans.edu/diary/rss/33474 [15] Inside a malicious Claude Code-branded extension and its persistent SSH backdoor Microsoft TI · 30h ago https://microsoft.com/en-us/security/blog/2026/10/30/inside-malicious-claude-code-branded-cursor-extension-persistent-ssh-backdoor [ 8] “Black October” for AI Developer Platforms Wiz · 33h ago https://wiz.io/blog/black-october-for-ai-developer-platforms [ 8] Introducing Censys Starter Subscriptions Censys · 38h ago https://censys.com/blog/introducing-censys-starter-subscriptions [ 8] Cybersecurity Dive: Hackers could poison AI models by tampering with core infrastructure Eclypsium · 38h ago https://eclypsium.com/news/cybersecurity-dive-hackers-could-poison-ai-models-by-tampering-with-core-infrastructure [20] 4 real? Tracking exploitation and patching of eMudhra’s weak keys Cloudflare · 38h ago https://blog.cloudflare.com/emudhra-patching NEWS ------------------------------------------------------------------------------ [22] Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims WIRED · 19h ago https://wired.com/story/kernel-panic-volta-autodoxer-ai-infostealer-malware [17] Syrian Hacker Gets Prison Time in US After Over a Decade on the Run SecurityWeek · 20h ago https://securityweek.com/syrian-hacker-gets-prison-time-in-us-after-over-a-decade-on-the-run [ 8] Applebee’s exposed customers’ personal data after leaving database password in app TechCrunch · 34h ago https://techcrunch.com/2026/10/30/applebees-exposed-customers-personal-data-after-leaving-database-password-in-app [13] China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days CyberScoop · 34h ago https://cyberscoop.com/china-vapor-panda-agentic-ai-artex-campaign-crowdstrike [19] Anthropic VS code extension on Cursor backdoored for nearly 12 hours Ars Technica · 34h ago https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours [ 8] DOJ raises privacy concerns over potential sale of Character.AI chats The Record · 35h ago https://therecord.media/doj-raises-privacy-concerns-over-character-ai-sale [13] A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices WIRED · 35h ago https://wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems [13] Devs Hit by Trojanized Claude Code Extension for Cursor Dark Reading · 35h ago https://darkreading.com/cyberattacks-data-breaches/devs-trojanized-claude-code-extension-cursor STANDARDS & POLICY ------------------------------------------------------------------------------ [12] OpenSSF Newsletter – October 2026 OpenSSF · 36h ago https://openssf.org/newsletter/2026/10/30/openssf-newsletter-october-2026 [12] New LF Research Survey Shows Generative AI Cuts Open Source Coding Time in Half, but 25% of Incoming Pull Requests are Considered AI Slop OpenSSF · 37h ago https://openssf.org/press-release/2026/10/30/new-lf-research-survey-shows-generative-ai-cuts-open-source-coding-time-in-half-but-25-of-incoming-pull-requests-are-considered-ai-slop [ 8] Payment Security Resources for Merchants PCI SSC · 3d ago https://blog.pcisecuritystandards.org/payment-security-resources-for-merchants [ 8] Design Tenets for Agent Identity Management Systems NIST · 4d ago https://nist.gov/blogs/cybersecurity-insights/design-tenets-agent-identity-management-systems [12] Hazardous Materials: Harmonization With International Standards Federal Register · 5d ago https://federalregister.gov/documents/2026/10/27/2026-21922/hazardous-materials-harmonization-with-international-standards [10] Outbound Investment Security Program Regulations Federal Register · 7d ago https://federalregister.gov/documents/2026/10/26/2026-21786/outbound-investment-security-program-regulations ============================================================================== Ranking is deterministic and documented at https://hippiekiller.net/about#method. RSS: https://hippiekiller.net/feed.xml · API: https://hippiekiller.net/api · All times UTC.