AI
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
Cloudflare Blog (Security) ·
Today, page 50
eMudhra, Brotli, and the Long Tail of a Security Fix
How much software do you have to update to fix one vulnerability, let alone two far-reaching ones in the same week? Our corner of the internet was getting impatient waiting for Node’s eMudhra fix to drop.
Socket Blog ·
AI
LiteLLM supply chain attack started with an exposed master key
LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May. The cloud and AI model secret-stealing part of the incident began when someone uploaded a poisoned version (1.107.0) of the…
The Register Security ·
Vulnerabilities
HashiCorp security advisory (AV26-1087)
Serial Number: AV26-1087 Date: October 26, 2026 As of October 26, 2026, HashiCorp is affected by a vulnerability in the following products: Consul Prior to 2.1.0 Consul Enterprise Prior to 1.21.19 Prior to 2.1.0 The Cyber Centre encourages users and…
Canadian Centre for Cyber Security ·
Threat Intel
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
The Hacker News + 1 outlet ·
Vulnerabilities
Microsoft releases emergency .NET security fixes for Google Brotli bug
The Register Security ·
Threat Intel
26th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 26th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Japanese cloud hosting provider Onamae Desktop Cloud has confirmed a cyberattack in which intruders…
Check Point Research ·
Meet the Huntress Neighborhood Watch Program
Huntress Blog ·
CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
CISA’s new strategy, CISA 2030, will focus on rapid detection and response and resiliency of critical services ahead of “passive defense”
Infosecurity Magazine ·
Endpoint
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
The Hacker News ·
Vulnerabilities
Craft CMS security advisory (AV26-1086)
Serial number: AV26-1086 Date: October 26, 2026 As of October 23, 2026, Craft CMS is affected by vulnerabilities in the following products: CMS Prior to 4.18.9 Prior to 5.11.2 Commerce-mollie Prior to 4.4.3 The Cyber Centre encourages users and administrators…
Canadian Centre for Cyber Security ·
AI
Trumpets blare and skies part as AI hypefest culminates in Anthropic IPO filing
The Register Security ·
Vulnerabilities
⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
The Hacker News ·
Vulnerabilities
Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
Six Linux flaws were made public, including one with a working root exploit and no merged fix
Infosecurity Magazine ·