ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
October 23, 2026
Trend Micro’s ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel mailing lists, with no mainline fix
Network Security
ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
Trend Micro's ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel mailing lists, with no mainline fix available and no CVE IDs ...
HPE Patches 72 Aruba AOS-8 and AOS-10 Flaws, Eight at CVSS 10.0
HPE advisory HPESBNW05162 fixes 72 vulnerabilities in Aruba AOS-8 and AOS-10 wireless products, including 34 critical flaws and eight rated CVSS 10.0.
FoxIO QPACK Flaws Crash HTTP/3 Servers via 4,000x Amplification
FoxIO found QPACK header decompression flaws in seven of ten HTTP/3 stacks; one unauthenticated connection can exhaust memory with up to 4,000x amplification.
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
Microsoft ties the ConnectWise Cloud Backup compromise to Storm-0940, which used an AI pentest tool called ARTEX against more than 2,250 Microsoft 365 tenants.
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
Unit 42 says Qilin and INC ransomware groups exploit PAN-OS flaw CVE-2026-0257 to bypass MFA, then pivot from VPN gateways to VMware vCenter and ESXi ...
Parkview Health Disables Network After Suspicious Activity
Parkview Health took its network offline over suspicious activity, knocking out MyChart across Indiana and Ohio. The cause is not confirmed as a cyberattack.
Unpatched Broadcom WPS Flaw Lets Nearby Attackers Root Routers
Researcher Quentin Kaiser disclosed an unpatched Broadcom WPS flaw with no CVE that gives nearby attackers root code execution on millions of routers.
GreyNoise: Proxyjacking Campaign Hijacks D-Link, Ubiquiti Devices
GreyNoise found a proxyjacking campaign that compromised at least 143 edge devices in 34 countries, installing Pawns.app to resell victims' bandwidth.
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such zero-day since September.
Palo Alto Patches PAN-OS RCE Zero-Day CVE-2026-0322 Under Attack
Palo Alto Networks patched CVE-2026-0322, a PAN-OS management interface RCE giving root access that is under limited exploitation, and CISA added it to KEV.
HPE Patches 72 Aruba AOS-8 and AOS-10 Flaws, Eight at CVSS 10.0
October 23, 2026
HPE advisory HPESBNW05162 fixes 72 vulnerabilities in Aruba AOS-8 and AOS-10 wireless products, including 34 critical flaws and eight rated
FoxIO QPACK Flaws Crash HTTP/3 Servers via 4,000x Amplification
October 23, 2026
FoxIO found QPACK header decompression flaws in seven of ten HTTP/3 stacks; one unauthenticated connection can exhaust memory with up
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
October 22, 2026
Microsoft ties the ConnectWise Cloud Backup compromise to Storm-0940, which used an AI pentest tool called ARTEX against more than
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
October 21, 2026
Unit 42 says Qilin and INC ransomware groups exploit PAN-OS flaw CVE-2026-0257 to bypass MFA, then pivot from VPN gateways
Parkview Health Disables Network After Suspicious Activity
October 20, 2026
Parkview Health took its network offline over suspicious activity, knocking out MyChart across Indiana and Ohio. The cause is not
Unpatched Broadcom WPS Flaw Lets Nearby Attackers Root Routers
October 19, 2026
Researcher Quentin Kaiser disclosed an unpatched Broadcom WPS flaw with no CVE that gives nearby attackers root code execution on
GreyNoise: Proxyjacking Campaign Hijacks D-Link, Ubiquiti Devices
October 16, 2026
GreyNoise found a proxyjacking campaign that compromised at least 143 edge devices in 34 countries, installing Pawns.app to resell victims’
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
October 15, 2026
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such
Palo Alto Patches PAN-OS RCE Zero-Day CVE-2026-0322 Under Attack
October 15, 2026
Palo Alto Networks patched CVE-2026-0322, a PAN-OS management interface RCE giving root access that is under limited exploitation, and CISA
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.