Daily Brief
Past editions
Every edition, newest first, with all of its headlines. To follow one vendor or product, browse by tag.
October 2026
2 editionsTuesday, October 20, 2026
7 items · No KEV additions
- Citrix NetScaler flaws chained to gain root and plant web shells, Rapid7 says
- Exploited
- In KEV
- PAN-OS flaw used by Qilin and Inc ransomware groups, Unit 42 says
- Exploited
- In KEV
- Pillow image library flaw that may allow code execution has a public exploit
- Public exploit
- Attackers use Cairn AI agents to break into online shops, NorForge says
- OVHcloud CLI downloads swapped for a build that steals secrets from disk
- Attacks confirmed
- National Cyber Security Centre on post-quantum settings for TLS
- Wiz on spotting attacks run end to end by AI agents in the cloud
- Citrix NetScaler flaws chained to gain root and plant web shells, Rapid7 says
Monday, October 19, 2026
7 items · 2 added to KEV
- BeyondTrust Remote Support zero-day used to take over appliances, Google says
- Exploited
- In KEV
- FortiOS flaw used to gain root and load the PEERSTITCH implant, Unit 42 says
- Exploited
- In KEV
- GitLab flaw that lets attackers run code on servers now has a public exploit
- Public exploit
- ConnectWise suspends Cloud Backup after its Microsoft 365 app was abused
- Attacks confirmed
- XTIUM and a pediatric network settle with two states over a 2024 breach
- Cisco Talos on CVEs more than doubling in a year while KEV grew 37%
- GuidePoint Security on leaked chats of a group posing as law firms’ IT staff
- BeyondTrust Remote Support zero-day used to take over appliances, Google says