OSINT & geopolitical
60 alerts in this category.
Open-source intelligence on threats outside the CVE ecosystem — geopolitical events, cyber-physical incidents, sanctions, and infrastructure attacks. Curated for security teams that need situational awareness alongside their patch queue.
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
The Hacker News published an news on "Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw". Topic areas: zero-day, malware, ransomware, data-breach. Published November 3, 2
CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
Bulletin ID: 2026-163-AWS Publication Date: 11/02/2026 11:00 AM PST Description: aidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, t
AWSCVE-2026-120497SANS Internet Storm Center Advisory — Nov 2, 2026
Last week, an often-ignored TCP option, introduced in 2020, made the news due to a new vulnerability in Linux's implementation (RFC 8684, Â
AppleCVE-2026-98432Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward
The top payout is for high-impact architectural research demonstrating full administrative control. The post Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward appeared first on SecurityWeek.
GoogleChainalysis Discloses Data Breach Following AI-Driven Cyberattack
The attackers used offensive agentic techniques to access the company’s systems and internal tools. The post Chainalysis Discloses Data Breach Following AI-Driven Cyberattack appeared first on Securit
Unit 42 Threat Intelligence Highlights - Nov. 2, 2026
Unit 42 details recent threat intelligence, highlighting cyberespionage, financial extortion, and the rapid adoption of AI across offensive workflows. The post Unit 42 Threat Intelligence Highlights -
IntelLinux kernel RCE CVE-2026-98432
CVSSv3 Score: 9.8 CVE-2026-98432:ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without
LinuxCVE-2026-98432Rapid7 Blog Advisory — Nov 2, 2026
OverviewOn October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357, a
IvantiCVE-2026-111357AI Vulnerability Finding
A comment: 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulne
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
The Hacker News published an news on "Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data". Topic areas: zero-day, malware, ransomware, data-breach. Published November 2
MicrosoftBTCPay Server warns of hot wallet crypto thefts on outdated instances
BleepingComputer published an news on "BTCPay Server warns of hot wallet crypto thefts on outdated instances". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See
Synology warns of C3RB3R ransomware attacks targeting NAS devices
BleepingComputer published an news on "Synology warns of C3RB3R ransomware attacks targeting NAS devices". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See the
Google disrupts million-device XCPE Android malware botnet, bans TV box maker
BleepingComputer published an news on "Google disrupts million-device XCPE Android malware botnet, bans TV box maker". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 20
Google⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
The Hacker News published an news on "⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More". Topic areas: zero-day, malware, ransomware, data-breach. Publis
Linuxit-sa 2026 Recap: Key Trends Shaping Security Operations
From October 27 to 29, the ANY.RUN team joined it-sa 2026 in Nuremberg, meeting customers, partners, SOC and MSSP teams, and cybersecurity professionals from across Europe. Three days of conversations
Intel2nd November – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 2nd November, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Binance, a global cryptocurrency exchange, has suf
MicrosoftCVE-2026-111497CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Bulletin ID: 2026-161-AWS Publication Date: 11/02/2026 08:30 AM PST Description: We are aware of CVE-2026-119301 in the Apache Iceberg write component, where improper neutralization of quoting syntax
ApacheCVE-2026-119301CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench
Bulletin ID: 2026-162-AWS Publication Date: 11/02/2026 09:30 AM PST Description: Virtual Engineering Workbench (VEW) is an open-source platform where platform engineers define and publish development
AWSCVE-2026-119085VU#203719: INFINITT PACS System Manager Contains Multiple Code Execution Vulnerabilities
Overview INFINITT PACS installations using System Manager versions 3.0.11.3 and 3.0.11.5 contain vulnerabilities that may allow an attacker to execute arbitrary code. INFINITT Healthcare has remediate
CVE-2026-16305NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
The Hacker News published an news on "NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection". Topic areas: zero-day, malware, ransomware, data-breach. Published November
SANS Internet Storm Center Advisory — Oct 27, 2026
Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update. ]]>
AppleCVE-2026-86950TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system. The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machine
CVE-2026-111585Rapid7 Blog Advisory — Oct 26, 2026
OverviewOn October 21, 2026, the Node.js Project published a security advisory for CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js. The vulnerability affects the Nod
GoogleCVE-2026-111497Hiding Capabilities in AI Models
Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities” Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The Hacker News published an news on "China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility". Topic areas: zero-day, malware, ransomware, data-breach. Published October 2
VMwareChainalysis discloses data breach from "offensive agentic techniques"
BleepingComputer published an news on "Chainalysis discloses data breach from "offensive agentic techniques"". Topic areas: ransomware, malware, data-breach, zero-day. Published October 31, 2026. See
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
The Hacker News published an news on "Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%". Topic areas: zero-day, malware, ransomware, data-breach. Published October 31, 2026. Se
Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines
Google Project Zero published an research on "Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines". Topic areas: zero-day, vulnerability, exploit, research. Published October 27, 202
GoogleSkyW4lker Exposed: A Growing Microsoft 365 Phishing Threat to American Enterprises
SkyW4lker (SkyW4lker x365 Sentinel) is an active device-code phishing kit targeting Microsoft 365 users in the United States, Europe, and other regions. By abusing Microsoft’s legitimate authenticatio
MicrosoftCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthen
CiscoCVE-2026-76418Vulnerabilities in Node.js Affecting Cisco Products: October 2026
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical
CiscoCVE-2026-111497CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue
Bulletin ID: 2026-160-AWS Publication Date: 10/30/2026 22:15 PM PDT Description: AWS is aware of CVE-2026-98432, a memory issue in the Linux kernel IPv4 TCP handshake path affecting kernel versions 4.
LinuxCVE-2026-98432CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
Bulletin ID: 2026-159-AWS Publication Date: 10/30/2026 11:00 AM PDT Description: We published CVE-2026-119117. Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for
AWSCVE-2026-119117CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command
CVE-2026-110447CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of
GoogleCVE-2026-48356Dev Channel Update for ChromeOS / ChromeOS Flex
Google Chrome Releases published an advisory on "Dev Channel Update for ChromeOS / ChromeOS Flex". Topic areas: google, chrome, browser, patch. Published October 30, 2026. See the original source link
GoogleSiemens Mendix SAML Module
View CSAF Summary Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion
CVE-2026-89209Hitachi Energy CoreTec Product
View CSAF Summary Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerab
LinuxCVE-2026-13162Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perf
DockerCVE-2023-4863Hitachi Energy TRO600 series products
View CSAF Summary Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code exe
CVE-2026-10756CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-114625 Arista VeloCloud Orchestrator SQL Injection Vulnera
CVE-2026-114625CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog and updated the PHP Alert, Critical Vulnerabilities in PHP Require Immediate Patching: CVE-2026-109618 – PHP
CVE-2026-109618EPICS Base
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execut
CVE-2026-114595CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition In
CiscoCVE-2026-97229CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas
Bulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT Description: AWS SDK for pandas (awswrangler) is an open-source Python libra
AWSCVE-2026-118029CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes
Bulletin ID: 2026-156-AWS Publication Date: 10/29/2026 09:30 AM PDT Description: We are aware of CVE-2026-119115, an incorrect authorization issue in the issuer resolution logic. In affected versions,
KubernetesCVE-2026-119115CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure
Bulletin ID: 2026-155-AWS Publication Date: 10/28/2026 15:00 PM PDT Description: AWS is aware of CVE-2026-111497, an issue in the native Brotli decompression library that could allow a third party to
AWSCVE-2026-111497Stable Channel Update for Desktop
Google Chrome Releases published an advisory on "Stable Channel Update for Desktop". Topic areas: google, chrome, browser, patch. Published October 29, 2026. See the original source linked under Refer
GoogleCVE-2026-76024Stable Channel Update for ChromeOS / ChromeOS Flex
Google Chrome Releases published an advisory on "Stable Channel Update for ChromeOS / ChromeOS Flex". Topic areas: google, chrome, browser, patch. Published October 28, 2026. See the original source l
GoogleCVE-2026-118339Beta Channel Update for ChromeOS / ChromeOS Flex
Google Chrome Releases published an advisory on "Beta Channel Update for ChromeOS / ChromeOS Flex". Topic areas: google, chrome, browser, patch. Published October 27, 2026. See the original source lin
GoogleCVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)
Bulletin ID: 2026-151-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/26/2026 09:30 AM PDT Description: The AWS Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha
AWSCVE-2026-115418Long Term Support Channel Update for ChromeOS
Google Chrome Releases published an advisory on "Long Term Support Channel Update for ChromeOS". Topic areas: google, chrome, browser, patch. Published October 27, 2026. See the original source linked
GoogleCVE-2026-103629VU#701544: mpc-lib Hardened Derivation Fails to Protect Ancestor Isolation
Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key. This breaks the ances
CVE-2026-90975CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)
Palo Alto Networks Security Advisories published an advisory on "CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)"
Palo AltoCVE-2026-111497VU#128947: COVESA vsomeip excessive memory allocation in reliable (TCP) endpoint buffer handling
Overview vsomeip, COVESA's open source implementation of the SOME/IP automotive communication middleware, contained a memory allocation vulnerability present in versions 3.7.3 and below. A vsomeip rel
CVE-2026-91141Vulnerabilities in PHP Affecting Cisco Products: October 2026
On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities: CVE-2026-109618 - RCE via OOM corruption CVE-2026-109619 - RCE
CiscoCVE-2026-109618How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia
Kaspersky Securelist published an research on "How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia". Topic areas: apt, malware, zero-day, ransomware. Published
MicrosoftCVE-2022-21894CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles
Bulletin ID: 2026-150-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/24/2026 20:00 PM PDT Summary: AWS identified CVE-2026-111943, a key-generation flaw at external C
AWSCVE-2026-111943CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server
Bulletin ID: 2026-149-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/23/2026 12:00 PM PDT Description: AWS MCP Server is a managed server that gives AI agents access
AWSCVE-2026-115845CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server
Bulletin ID: 2026-148-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/23/2026 10:30 AM PDT Description: Amazon Web Services Multi Model Server (MMS) is an open source
AWSCVE-2026-115812
Get alerts that match YOUR environment
This page shows everything in the category. Vulnios narrows it down to alerts that affect your actual asset inventory — only the CVEs you need to act on.
Start a free scan