Italy’s Chamber of Deputies Confirms Email Accounts Targeted
October 28, 2026
Italy’s Chamber of Deputies confirmed its IT systems were targeted, with reports naming three email accounts including one assigned to
News
Italy’s Chamber of Deputies Confirms Email Accounts Targeted
Italy's Chamber of Deputies confirmed its IT systems were targeted, with reports naming three email accounts including one assigned to Giorgia Meloni.
Adobe Patches Nine Critical Flaws in Campaign Classic, Connect
Adobe fixed nine critical vulnerabilities in Campaign Classic and Connect, led by CVE-2026-105781, a CVSS 10.0 SQL injection, in two October bulletins.
WatchGuard Publishes 18 Fireware OS Advisories, Seven Critical
WatchGuard released 18 Fireware OS advisories for Firebox firewalls, seven rated critical, led by a 9.5 WireGuard stack buffer overflow, with fixes available.
NVIDIA Patches CVSS 10.0 Authentication Flaw in NeMo Toolkit
NVIDIA fixed CVE-2026-65145, a CVSS 10.0 missing-authentication flaw in the NeMo Agent Toolkit, plus five other bugs in NeMo, TensorRT-LLM and PhysX products.
Chrome 156 Update Fixes 52 Flaws Including Sandbox Escape
Google's Chrome 156.0.8078.73 update fixes 52 flaws, four critical, including CVE-2026-118306, a FileSystem bug that allows code execution outside the sandbox.
Fake Claude Download Pages on claude.ai Spread Mac Stealer
Gen Digital found fake Claude install guides hosted on the real claude.ai domain, promoted by Google Ads, delivering Atomic macOS Stealer and a Windows RAT.
Fake IT Support Teams Chats Tied to 400+ Intrusions, Arctic Wolf Says
Arctic Wolf details a pattern in 400+ incidents where attackers pose as IT support in Microsoft Teams external chats and run malware within 15 minutes.
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
CISA added PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to its KEV catalog after honeypots logged 35 working shells, with a DPRK-linked group suspected.
Microsoft and Palo Alto Patch Critical Brotli Flaw CVE-2026-111497
Microsoft shipped out-of-band .NET fixes and Palo Alto confirmed PAN-OS exposure to Brotli flaw CVE-2026-111497, as Wiz finds 91% of cloud environments exposed.
Gheist Campaign Uses Stolen GitHub Tokens on 850+ Accounts
Wiz Research says the Gheist campaign used stolen GitHub tokens to pull CI secrets from 850+ accounts, hitting private repos and GitHub Enterprise Server.
Adobe Patches Nine Critical Flaws in Campaign Classic, Connect
October 28, 2026
Adobe fixed nine critical vulnerabilities in Campaign Classic and Connect, led by CVE-2026-105781, a CVSS 10.0 SQL injection, in two
WatchGuard Publishes 18 Fireware OS Advisories, Seven Critical
October 28, 2026
WatchGuard released 18 Fireware OS advisories for Firebox firewalls, seven rated critical, led by a 9.5 WireGuard stack buffer overflow,
NVIDIA Patches CVSS 10.0 Authentication Flaw in NeMo Toolkit
October 28, 2026
NVIDIA fixed CVE-2026-65145, a CVSS 10.0 missing-authentication flaw in the NeMo Agent Toolkit, plus five other bugs in NeMo, TensorRT-LLM
Chrome 156 Update Fixes 52 Flaws Including Sandbox Escape
October 28, 2026
Google’s Chrome 156.0.8078.73 update fixes 52 flaws, four critical, including CVE-2026-118306, a FileSystem bug that allows code execution outside the
Fake Claude Download Pages on claude.ai Spread Mac Stealer
October 28, 2026
Gen Digital found fake Claude install guides hosted on the real claude.ai domain, promoted by Google Ads, delivering Atomic macOS
Fake IT Support Teams Chats Tied to 400+ Intrusions, Arctic Wolf Says
October 28, 2026
Arctic Wolf details a pattern in 400+ incidents where attackers pose as IT support in Microsoft Teams external chats and
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
October 27, 2026
CISA added PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to its KEV catalog after honeypots logged 35 working shells, with a DPRK-linked
Microsoft and Palo Alto Patch Critical Brotli Flaw CVE-2026-111497
October 27, 2026
Microsoft shipped out-of-band .NET fixes and Palo Alto confirmed PAN-OS exposure to Brotli flaw CVE-2026-111497, as Wiz finds 91% of
Gheist Campaign Uses Stolen GitHub Tokens on 850+ Accounts
October 27, 2026
Wiz Research says the Gheist campaign used stolen GitHub tokens to pull CI secrets from 850+ accounts, hitting private repos
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.