HPE Patches 72 Aruba AOS-8 and AOS-10 Flaws, Eight at CVSS 10.0
October 23, 2026
HPE advisory HPESBNW05162 fixes 72 vulnerabilities in Aruba AOS-8 and AOS-10 wireless products, including 34 critical flaws and eight rated
News
HPE Patches 72 Aruba AOS-8 and AOS-10 Flaws, Eight at CVSS 10.0
HPE advisory HPESBNW05162 fixes 72 vulnerabilities in Aruba AOS-8 and AOS-10 wireless products, including 34 critical flaws and eight rated CVSS 10.0.
Railway Says Intruder May Have Decrypted Customer Secrets
Railway detected anomalous activity on systems storing customer environment variables and urged all users to rotate secrets; crypto wallet thefts were reported.
INTERPOL Operation Serengeti III Nets 1,462 Arrests in Africa
INTERPOL's Operation Serengeti III led to 1,462 arrests, disrupted 10,909 malicious networks and recovered more than $105 million across African countries.
Node.js Security Releases Fix Brotli Out-of-Bounds Write Flaw
Node.js shipped fixes for 10 flaws, led by a Brotli decoder out-of-bounds write that could allow code execution; a public PoC hit RCE only on ...
Onamae Desktop Cloud Hacked; Malware on Up to 26,739 Servers
GMO Internet Group says an intruder planted malicious programs on up to 26,739 Onamae.com Desktop Cloud servers in Japan and has shut the service down.
Columbia, South Carolina Takes Systems Offline After Cyberattack
Columbia, South Carolina took city systems offline after suspicious activity; SLED leads the probe and the city has not said whether ransomware is involved.
FoxIO QPACK Flaws Crash HTTP/3 Servers via 4,000x Amplification
FoxIO found QPACK header decompression flaws in seven of ten HTTP/3 stacks; one unauthenticated connection can exhaust memory with up to 4,000x amplification.
LiteLLM 1.107.0 Backdoored in PyPI Supply Chain Attack
Attackers slipped a credential stealer and remote access trojan into LiteLLM 1.107.0, a package with 23 million weekly downloads, before PyPI quarantined it.
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
Microsoft ties the ConnectWise Cloud Backup compromise to Storm-0940, which used an AI pentest tool called ARTEX against more than 2,250 Microsoft 365 tenants.
PHP Ships Emergency Patches for PHP2Shell as Exploitation Begins
PHP released emergency fixes for two CVSS 9.2 flaws after details leaked early, and researchers saw exploitation attempts before and during the patch release.
Railway Says Intruder May Have Decrypted Customer Secrets
October 23, 2026
Railway detected anomalous activity on systems storing customer environment variables and urged all users to rotate secrets; crypto wallet thefts
INTERPOL Operation Serengeti III Nets 1,462 Arrests in Africa
October 23, 2026
INTERPOL’s Operation Serengeti III led to 1,462 arrests, disrupted 10,909 malicious networks and recovered more than $105 million across African
Node.js Security Releases Fix Brotli Out-of-Bounds Write Flaw
October 23, 2026
Node.js shipped fixes for 10 flaws, led by a Brotli decoder out-of-bounds write that could allow code execution; a public
Onamae Desktop Cloud Hacked; Malware on Up to 26,739 Servers
October 23, 2026
GMO Internet Group says an intruder planted malicious programs on up to 26,739 Onamae.com Desktop Cloud servers in Japan and
Columbia, South Carolina Takes Systems Offline After Cyberattack
October 23, 2026
Columbia, South Carolina took city systems offline after suspicious activity; SLED leads the probe and the city has not said
FoxIO QPACK Flaws Crash HTTP/3 Servers via 4,000x Amplification
October 23, 2026
FoxIO found QPACK header decompression flaws in seven of ten HTTP/3 stacks; one unauthenticated connection can exhaust memory with up
LiteLLM 1.107.0 Backdoored in PyPI Supply Chain Attack
October 22, 2026
Attackers slipped a credential stealer and remote access trojan into LiteLLM 1.107.0, a package with 23 million weekly downloads, before
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
October 22, 2026
Microsoft ties the ConnectWise Cloud Backup compromise to Storm-0940, which used an AI pentest tool called ARTEX against more than
PHP Ships Emergency Patches for PHP2Shell as Exploitation Begins
October 22, 2026
PHP released emergency fixes for two CVSS 9.2 flaws after details leaked early, and researchers saw exploitation attempts before and
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.