Ivanti Connect Secure
Ivanti Connect Secure flaw used to get root and steal credentials, Volexity says
Volexity saw a group it tracks as UTA0576 exploit it from Oct 3, and Ivanti released patches on Oct 29.
Daily Brief
Monday, November 2, 2026
Added to KEV
2 additionsSource: CISA’s Known Exploited Vulnerabilities catalog, version 2026.10.30
Vulnerabilities and patches
1 itemBeyondTrust Remote Support
- Exploited
BeyondTrust Remote Support zero-day now has a public Metasploit exploit
Rapid7 shows how an unauthenticated attacker forges a message to write files and run code, and lists log entries its successful test runs left.
Breaches and campaigns
3 itemsMicrosoft Active Directory Certificate Services and Teams
Fake IT support on Teams ends in certificates for admins, Microsoft says
In two intrusions, the attackers abused weak certificate settings in Active Directory to act as privileged accounts or a domain controller, and stole file server data in one.
Northflank breach adds to a month of attacks on AI developer platforms
Northflank tells customers to assume every stored secret was exposed, and Wiz traced keys stolen from one such platform to heavy use of Amazon’s Bedrock AI service.
Intruder accessed user data at blockchain analytics firm Chainalysis
Chainalysis says the attacker used “offensive agentic techniques” in October, and it has found no sign that investigation content, passwords or session tokens were reached.