Cybersecurity Newsfeed - 14/10/26

Cybersecurity Newsfeed

📅 14/10/26

🛡️ Vulnerabilities

• Qualys Patch Tuesday October 2026 Review: Qualys published its analysis of Microsoft’s latest update cycle, addressing critical remote code execution and privilege escalation flaws across Windows, Office, and server components. The breakdown provides impact metrics and prioritized mitigation strategies for enterprise teams. More info

• Ghostscript PDF Interpreter RCE Flaw: A critical input validation flaw in the open-source Ghostscript interpreter allows unauthenticated remote attackers to escape the execution sandbox via uploaded PDF files, leading to full server compromise. More info

• CISA Adds Windows & Ivanti Flaws to KEV Catalog: CISA added a Windows command injection bug (CVE-2026-96951) and an Ivanti Connect Secure spoofing authentication bypass (CVE-2026-104935) to its KEV catalog, requiring federal agencies to remediate under BOD 26-04. More info

• Microsoft October 2026 Patch Tuesday Fixes 1,411 Flaws: Microsoft addressed 1,411 vulnerabilities across its ecosystem, including three zero-day bugs—one of which is actively exploited in the wild alongside two publicly disclosed flaws. More info

• Ivanti Connect Secure Exploit Chain: Threat actors are chaining three distinct flaws—authentication bypass, privilege escalation, and command injection—in Ivanti Connect Secure VPN appliances to execute remote code and move laterally across networks. More info

• Maximum-Severity SAP System Command Flaw: SAP released security updates for a CVSS 10.0 vulnerability caused by missing authentication and access checks, allowing unauthenticated attackers to execute arbitrary system commands. More info

• LiteLLM AI Gateway Hijack & Key Exfiltration Flaws: Check Point Research uncovered two flaws (CVE-2026-35029, CVE-2026-59823) in LiteLLM allowing low-privileged users to hijack admin accounts, execute remote code, and steal API keys for OpenAI and Anthropic. More info

• Adobe Patches 140 Vulnerabilities Across 10 Products: Adobe issued updates fixing 140 bugs in products including Photoshop, Acrobat, and Reader, resolving multiple critical issues that could lead to code execution and privilege escalation. More info

• Ivanti Warns of Connect Secure Zero-Day: Ivanti issued an urgent warning for an actively exploited zero-day vulnerability impacting Connect Secure VPN appliances, allowing remote execution of arbitrary commands. More info

• Docker Hub User Impersonation & Image Tampering: A flaw in Docker Hub enabled malicious actors to impersonate legitimate users and manipulate published container image repository tags, posing supply chain risks. More info

• Critical SSRF Security Flaw in SAP OAuth2: SAP warned of a CVSS 10.0 Server-Side Request Forgery vulnerability in its OAuth2 implementation that lets unauthenticated remote attackers access restricted internal endpoints. More info

• MarkLogic Enterprise NoSQL Critical Flaws: Two critical vulnerabilities in MarkLogic Enterprise NoSQL database software allow unauthenticated attackers to execute code with elevated privileges via administrative endpoints. More info

• GitLab Emergency Patch for CVSS 10.0 Flaw: GitLab released an emergency security patch addressing a maximum-severity command execution and account takeover bug in self-managed DevOps instances. More info

• SonicWall SMA Max-Severity SSRF Exploitation: A maximum-severity SSRF vulnerability impacting SonicWall Secure Mobile Access (SMA) appliances is under active exploitation, allowing remote control bypass. More info

🎯 Adversaries

• OT Attack Targets French Supermarket Refrigeration: Attackers exploited weak remote access controls in industrial OT systems to alter refrigeration parameters across a major French supermarket chain, forcing inventory disposal. More info

• Ukraine Drone Strikes Yandex Data Centers: Ukrainian military drone strikes hit Russian tech giant Yandex’s data centers, causing operational outages across cloud services and server infrastructure in a conflict zone. More info

📈 Trends

• Trellix Launches Private Cloud AI Investigation Tool: Trellix announced Trellix Wise for Private Cloud, delivering automated, transparent, and auditable AI-driven threat investigations for air-gapped security operations. More info

• Report Details Exploitation Gaps in MFA Implementations: A security report outlines persistent MFA gaps, including AiTM phishing, session hijacking, and push fatigue, advocating for phishing-resistant FIDO2 keys and passkeys. More info

• VMware Introduces Lifecycle Management Tools for Patch Flood: Due to an unprecedented volume of security updates across its virtualization ecosystem, VMware is rolling out new patch management tools to assist enterprise IT teams. More info

💥 Breaches & Leaks

• UK Housing Ombudsman Service Security Incident: The UK Housing Ombudsman Service is investigating a cyber incident that impacted internal operational IT systems, bringing in forensic specialists to assess data exposure. More info

• TFG London Attack Disrupts Hobbs & Whistles Retailers: Retail group TFG London experienced a major cyberattack that took systems offline and disrupted operations across popular retail brands Hobbs and Whistles. More info

📚 Others

• Ad-Tech Platform Xandr Fined Record $86 Million: Privacy regulators issued an $86 million fine against Xandr for unlawful data processing practices and non-transparent user tracking across ad-tech networks. More info

---

⬅ Back to Archive