The intelligence desk for humans and AI agents. Primary sources, organized into operational context — what happened, who's hit, how bad, what's next. Updates on the tick.
CISA added CVE-2026-111497 -- an out-of-bounds write in Google's Brotli decompression library, bundled inside Node.js and reused across many other runtimes -- to its Known Exploited Vulnerabilities catalog on October 27, giving federal agencies a November 10 deadline. Threat-intelligence firm ELLIO reports its sensors recorded working exploit traffic against the flaw from IP address 94.154.43.7, the same address it has tracked running exploit attempts against this file's own PHP2Shell vulnerabilities and probing Palo Alto GlobalProtect, FortiOS SSL VPN, and Kubernetes APIs; ELLIO's claim has not been independently corroborated by another vendor, and CISA's own KEV entry gives no technical detail beyond confirming exploitation. Google's own CNA submission to NVD rates the flaw CVSS 9.2 (v4.0); Node.js's own security advisory rates it 'high' without publishing a numeric score. The bug is not confined to Node.js: because it lives in the underlying Brotli library itself, researchers have also confirmed it reachable through Python packages, .NET, Bun, Envoy, Istio, FFmpeg, Apache Arrow, and ClickHouse -- any software that decompresses attacker-controlled Brotli data with an unpatched decoder. Node.js shipped fixes (22.23.4, 24.22.1, 26.12.1) on October 21, six days before the KEV listing; the project's own end-of-life 20.x, 23.x, and 25.x lines remain vulnerable with no fix planned. Separately, PHP2Shell's own federal KEV deadline is now two days away (October 29), and Palo Alto Networks continues shipping PAN-OS/Panorama hotfixes for its own confirmed exposure -- both carried in today's daily briefing and threat context.
Key points
NODE2SHELL NOW KEV-LISTED -- CISA added CVE-2026-111497, a critical out-of-bounds write in the Brotli decompression library bundled with Node.js, to its Known Exploited Vulnerabilities catalog on October 27, with a federal patching deadline of November 10.
SAME ATTACKER INFRASTRUCTURE AS PHP2SHELL -- threat-intel firm ELLIO reports its sensors recorded working exploit traffic from IP address 94.154.43.7, the same IP it has tracked running this file's own PHP2Shell exploit attempts and VPN/Kubernetes scanning; ELLIO's claim has not been independently corroborated.
REACH GOES WELL BEYOND NODE.JS -- Google's own Brotli library, not just Node.js, is affected; downstream consumers researchers have confirmed vulnerable include Python packages, .NET, Bun, Envoy, Istio, FFmpeg, Apache Arrow, and ClickHouse.
GOOGLE RATES IT CVSS 9.2 -- Google's own CNA submission to NVD scores the flaw 9.2 (CVSS v4.0); Node.js's own advisory rates it 'high' without publishing a numeric score.
PATCHES SHIPPED OCT 21, SIX DAYS BEFORE KEV -- Node.js 22.23.4/24.22.1/26.12.1 and Brotli 1.0.10/1.1.1/1.2.1 fix the flaw; Node's own end-of-life 20.x/23.x/25.x lines are also vulnerable and will not receive a fix.
Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October 28 and pays only if a tip helps lead to an arrest or an international wanted notice. The service hosts Windows desktops used for FX trading,
In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams need to cut exposure while remediation is pending. Blakley describes a shared metric for CIOs and CISOs, how his team tests for silent model updates, who owns the damage when an AI agent makes a mistake, and why blocking … More → The post Bellini Capital CISO on AI security governance and the limits of patching faster appeared first on Help Net Security.
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background process carries out with root privileges. To use them, an attacker must
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its own loopback address
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-111497 (CVSS score: 9.2) - An unchecked return value vulnerability in
The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems. The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), explains which cryptographic methods need to be replaced, what organizations should consider and how the transition will unfold. It builds on the post-quantum cryptography standards NIST released in August 2024. Those standards provide new ways to protect information against … More → The post NIST starts the countdown to retire quantum-vulnerable encryption appeared first on Help Net Security.
Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026. Businesses rely on outside providers to store information, process transactions and operate software. A breach at one of those providers can expose customer records across multiple organizations, including people who have never heard of the company holding their data. Percentage of individuals impacted due to a third party, by industry … More → The post Breach victims discover their data was held by companies they’ve never heard of appeared first on Help Net Security.
October 27, 2026 – Gatineau, Quebec Privacy Commissioner of Canada Philippe Dufresne has opened an investigation related to a cybersecurity incident involving tips shared with Crime Stoppers programs across Canada. The Commissioner initiated the investigation into Navigate360, the commercial organization that provides and manages the tip management platform used by Canadian Crime Stoppers’ chapters. The...
A new Android malware operation called MR ROBOT is turning banking fraud into a subscription business. CloudSEK’s investigation reveals how cybercriminals rent customised banking trojans to steal OTPs, card details, UPI PINs and credentials while secretly forwarding calls to bypass security checks. One tracked affiliate intercepted 5,407 SMS messages across 153 infected devices, exposing the scale of this Malware-as-a-Service operation targeting Indian bank customers. Authors : Bhavik Malhotra
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a ransomware attack today. [...]
Critical flaw in EDK2 allows attackers to execute code early in the boot process. The post Ars Technica: Code-execution flaw in UEFI firmware affects most servers on planet Earth appeared first on Eclypsium.
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. [...]
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more information, see Node.js Security Release. The following vulnerabilities have a Security Impact Rating (SIR) of High and are addressed in this advisory: CVE-2026-111497 - Brotli decoder out-of-bounds write; potential remote code execution CVE-2026-105482 - DNS resolution truncation involving embedded NUL characters CVE-2026-105483 - TLS hostname validation bypass using fullwidth IP digits CVE-2026-106069 - TLS hostname validation bypass with noncanonical IP addresses Important: If a product is not listed within this advisory, Cisco's review indicates that the product is not affected by this vulnerability. This advisory will be updated as additional information becomes available. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-oct2026-node-js-Jj3SQ19u Security Impact Rating: High
Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more coordination. The post Before you file that AI bug report, OpenAI has some advice appeared first on CyberScoop.
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout. [...]
Anthropic has said out-of-control AI poses a threat to the world, but perhaps unsurprisingly suggests that profit will shape those decisions, too. The post All the security risks Anthropic is worried about before its IPO appeared first on CyberScoop.
Multiple Ontario Crime Stoppers organizations have suspended use due to Navigate360’s data breach and unacceptable incident response; U.S. state education departments are collaborating to seek more answers from Navigate360; an update from DataBreaches.net. Toronto Crime Stoppers didn’t take long to respond after Valérie Ouellet and Michelle Allan dove into the Crime Stoppers data in the...
Bill Toulas reports: The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. The educational organization detected the breach last Tuesday and disclosed it on Friday. In an update yesterday, the university added another 20,000 staff and students whose PIN codes were exposed....
A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.
Dawn Kopecki reports: The US Federal Election Commission’s website has been targeted by a hacker or hackers, disrupting the agency’s electronic filings system a week before the November 3 elections, according to an email seen by Reuters. In a statement, the FEC said that, “at this time, the FEC’s electronic filing system is currently offline...
Italy ’s Parliament cyberattack highlights hybrid warfare risks and the need for transparency, stronger defenses and accountability. The cyberattack targeting email accounts at Italy’s Chamber of Deputies, including a parliamentary account assigned to Prime Minister Giorgia Meloni, raises questions that go well beyond the security of individual inboxes. At a time when European institutions face […]
UA News reports: In Moldova, the personal data of approximately 750,000 people may have been stolen following a cyberattack on government digital services. Prime Minister Vasile Tofan stated that such attacks may become increasingly frequent, so the country needs to strengthen its cybersecurity and invest more in the security of government systems. Some online services...
Avery Kreemer reports: Ohio Auditor Keith Faber announced that his office’s web server was attacked by “overseas cybercriminals and potentially foreign state actors,” prompting the state to temporarily take down the server. Faber said there’s no reason to believe Ohioans’ personal financial information is at risk as a result of the attack, which came on...
The Lokmat Times Desk reports: A cyber attack on the digital systems of Kamalnayan Bajaj Hospital has sent shockwaves through the city. Around midnight, hackers broke into all nine of the hospital’s servers and encrypted its entire data in what appears to be a digital heist aimed at extorting money. The attack has put patient...
DysruptionHub reports: A cyberattack forced the University of New Mexico Health System to divert ambulances and cancel clinic appointments Monday, interrupting care at the state’s only Level I trauma center. The Albuquerque-based academic health system canceled appointments at more than 30 clinics across New Mexico. Patients were told not to come to its facilities for...
Australia’s cyber agency warns AI will drive more disruptive attacks, helping hackers find vulnerabilities faster and exploit them at greater scale. Australia’s top cyber spy has a blunt message: expect more disruption to everyday services. Abigail Bradshaw, director-general of the Australian Signals Directorate (ASD), says that with each jump in AI capability, more disruption is […]
John & Rusty Report: An attacker used a “phishing” strategy to get unauthorized access to Covered California agent information spreadsheets May 13, according to a sample breach notice letter posted on the California attorney general’s website Oct. 16. “As a result of this incident, your information, along with information relating to other agents, was disclosed,”...
Artem Stryzhak participated in a series of ransomware attacks on hospitals, government entities and law firms from the middle of 2018 to late 2021. The post Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison appeared first on CyberScoop.
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously published
Bruce Giles reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over the third-largest healthcare data breach on record, which exposed data on about 62.2 million people. Conduent signed the settlement Oct. 16 with plaintiffs in the U.S. District Court for the District of New Jersey, according to...
Thomas Brewster reports: Crypto thieves are targeting iPhone users at scale with a sneaky kind of cyberattack that only requires victims to view an ad or visit an infected webpage, researchers tell Forbes. Hundreds of websites have been compromised as part of the hack, they say and, in one case, a malware ad was served...
The following is a machine translation of an article that originally appeared in Russian. Boris Piletskiy writes: On October 22, Capcom acknowledged a massive user data breach. A hacker managed to breach Capcom ID and access data for 11.7 million accounts: We recently discovered that a third party gained unauthorized access to our systems, resulting...
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates. [...]
Bulletin ID: 2026-152-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/27/2026 11:00 AM PDT Description: The AWS API MCP Server is an open source Model Context Protocol (MCP) server that enables AI assistants to interact with AWS services and resources through AWS CLI commands. It can be configured to serve the streamable-http transport with OAuth authentication, validating a bearer token against an identity provider nominated by the operator. We identified CVE-2026-115413 in versions >=1.3.0 and <1.6.0, the server validates a token's signature, issuer and expiry, but not the claim identifying the application the token was issued for. Impacted versions: >=1.3.0 AND <1.6.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin. Read this article
A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as “Node2Shell”, “Broccoli2Shell” and “Brotli2Shell”, CVE-2026-111497 is a remotely exploitable out-of-bounds write flaw that gained widespread attention after Node.js publicly disclosed it on October 21, 2026. “An attacker who can supply Brotli data that an application decompresses with node:zlib can corrupt process memory, which can lead to a crash, disclosure of process … More → The post Brotli bug reaches far beyond Node.js (CVE-2026-111497) appeared first on Help Net Security.
New findings by the Citizen Lab and SHARE Foundation show that a prominent supporter of Serbia's student movement was targeted with spyware. The post Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’ appeared first on The Citizen Lab.
The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint.
On Thursday, a customer marketing manager vibe codes a community portal where customers can sign in, post questions, and search past answers. By Friday it’s live on Vercel, with a custom domain, an OPENAI_API_KEY for the AI search saved as a plain config variable, and a database full of customer names, emails, and support threads. […]
On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day Initiative first reported this CVE to Oracle on June 10, 2026, following an investigation I conducted with Minh Giang and Lucas Miller of TrendAI Research. Although Oracle issued a patch under a single CVE, we reported three distinct vulnerabilities across multiple PeopleSoft components. We are coordinating with Oracle to assign separate CVEs for each issue. In this blog post, we will walk through each of these vulnerabilities, starting with a Server-Side Request Forgery (SSRF) vulnerability. We will also review the validateClient method that Oracle introduced to allow PeopleSoft system administrators to restrict access to certain functionality. Spoiler alert: the SSRF allows attackers to make requests that satisfy this validation and access endpoints vulnerable to remote code execution (RCE). Overview There are two main components involved here, both served as individual Oracle WebLogic applications. The first, the PeopleSoft Environment Management Hub (PSEMHUB), is part of Oracle’s Environment Management Framework. This component implements the validateClient method, ensuring only trusted clients can reach PSEMHUB functionality. Because this is an internal management interface, it makes sense that Oracle would restrict access to its web endpoints. However, this also means it’s a prime target for attackers looking to pivot from their existing, low-privileged access. The second, the PeopleSoft Integration Gateway (PSIGW), contains functionality for exchanging messages between the PeopleSoft server and remote systems. This is accomplished using a set of Listening and Target Connectors. One such connector is the HttpListeningConnector, which translates data from inbound HTTP requests into the format supported by the specified Target Connector before routing the request to the desired URL. In this chain, attackers specify the HttpTargetConnector. The diagram below shows how an attacker like ShinyHunters can combine these vulnerabilities to compromise PeopleSoft systems. Notice that the attacker cannot simply hit the PSEMHUB functionality directly: Bug 1: PSIGW Server-Side Request Forgery (ZDI-CAN-31816) Now let’s take a look at how the PSIGW SSRF provides attackers with a foothold in the PeopleSoft application. An example malicious request to PSIGW shows just how powerful this is for an attacker. We control the URL to hit AND the full payload to send! At [1], the attacker sends a POST request to /PSIGW/HttpListeningConnector At [2], the HttpTargetConnector handler class is specified At [3], the target is PeopleSoft on the loopback interface at http://127.0.0.1:8000, satisfying the validateClient logic At [4], the full POST request payload is specified in the Data field, to be forwarded to the target URL at [3] The HttpTargetConnector handler appears below. Note there is no validation to ensure this traffic is legitimate and bound for a valid target. I've done my best to pull out the important parts of this 800+-line function. If you want a fun side quest, go decompile this for yourself and check it out. I hope you like spaghetti! At [1], retrieve the target URL from the attacker's request At [2], create an httpObj using the URL from [1] At [3], retrieve the HTTP method (POST) and apply it to the httpObj from [2] At [4], send the content data seen in the Data tag of the network request. This content is sent as-is using the HTTP parameters configured in the httpObj To fully understand why this SSRF is valuable, here is the validateClient method I mentioned earlier: At [1] and [2], the validateClient method pulls the hostname and IP of the requesting client At [3], a file path is built to the /envmetadata/config/allowedhosts.properties file, which contains the list of hosts allowed to access functionality protected by validateClient At [4], the server checks if the allowedList set contains any entries. The first time this path is hit, the set is empty, so execution continues into the client list refresh block At [5], that allowedhosts.properties file is read and iterated over At [6] and [7], each allowed host is added to the allowedList set, including the default localhost entry alongside the server's resolved hostname and IP address At [8] and [9], if the requesting host is found in the allowedList set, validateClient returns true We can see the localhost entry in the default allowedhosts.properties that ships with PeopleSoft: While this solution does restrict access, an attacker on any trusted host can still reach PSEMHUB. Because Oracle allows localhost by default, the PSIGW SSRF provides exactly that access. Bug 2: PSEMHUB External Control of File Path (ZDI-CAN-31818) Now that the attacker can make requests to the PSEMHUB endpoints using the PSIGW SSRF, let's see how they can turn that into RCE. The first path to code execution uses an External Control of File Path vulnerability in the ExecuteProcessActivityCommand handler, which is designed to allow remote clients to write log entries to the PeopleSoft server’s filesystem. However, callers of the command control both the file contents AND the absolute file path on disk to which that content is written. Here’s an example of the request made to PSEMHUB. Note that, in practice, each parameter value is a form-encoded serialized Java object. For clarity, I’ve decoded and formatted it here: At [1], we see the request is being made to PSEMHUB’s central routing hub At [2], note that the request is made to the loopback address 127.0.0.1. Since this request originates from localhost, the validateClient check is satisfied At [3], the web shell contents are specified in the m_line parameter At [4], the absolute path where the contents will be written is specified in the m_targetFile parameter Looking at the handler for this request, we can see that no validation is performed to ensure that…
Our Threat Research Unit published a breakdown of “The Gentlemen” - a Russian-speaking ransomware-as-a-service group that emerged in mid-2025, reportedly after affiliates split off from established groups like LockBit and Qilin. A few things that stood out from the research: They’re offering affiliates up to 90% of ransom revenue - aggressive even by RaaS standards Claimed 800+ victims across the US and Europe, making them one of the top RaaS groups this year Cross-platform ransomware variants targeting Windows, Linux, NAS, and BSD Active use of EDR-killing tooling - one recent incident involved a custom dropper abusing vulnerable Safetica ProcessMonitor and Lenovo BootRepair.sys drivers (BYOVD) A breach of the group’s own infrastructure gave researchers rare visibility into their affiliate network, tooling, and ties to the broader ransomware ecosystem Full technical writeup linked below for anyone who wants to dig into the IOCs and affiliate details. https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/ submitted by /u/acronis [link] [comments]
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure. [...]