Critical CVE explainers: what each actively exploited or high-severity vulnerability affects, which versions fix it, and how to check and harden your systems.
CVE-2026-97229, a CVSS 10.0 flaw in GitLab’s regex compiler, is now in CISA’s KEV catalog. Who is exposed, which version to patch to now, how the attack works and how to hunt for prior compromise.
Read story ↗The October 31, 2026 weekly magazine: twelve stories from Binance to SkyW4lker, each with a defensive architecture field guide, plus the weekly roundup and what to watch.
Read story ↗The $6.36B Binance heist and TraderTraitor, the DebugBear script that drained Polymarket traders, GitLab CVE-2026-97229 at Alpine Linux, Cisco ASA/FTD CVE-2026-76418, TeamViewer CVE-2026-111585 and Drupal Commerce CVE-2026-118539.
Read story ↗Exploitation de Cisco ASA/FTD, SD-WAN KeyDrift, Silent Train, VMware dans CISA KEV, Alpine GitLab, So-net et iRhythm : huit points de presse vérifiés.
Read story ↗PolyShell (CVE-2026-48356) let attackers upload web shells to Magento and Adobe Commerce stores. Sansec now tracks a loader campaign hiding in the cms_block table across 953 stores, including patched ones. IOCs, SQL checks, patch versions and a clean-up checklist.
Read story ↗CVE-2026-101767 (CVSS 9.8) lets unauthenticated attackers reach Oracle E-Business Suite's database as APPS through the AppsTCFServer servlet and chain to OS commands. Exploitation attempts began October 22, 2026. Affected versions, the October CPU fix, indicators and hardening steps.
Read story ↗CVE-2026-111497 is an out-of-bounds write in the Brotli decoder bundled with Node.js 22, 24 and 26. CISA added it to KEV on October 27, 2026. Here are the fixed versions, how attacks reach the decoder, how to check your runtimes and how to reduce exposure.
Read story ↗The October 28, 2026 Intelligence Edition of MAG212 CYBER: 28 verified pages on the Node.js Brotli flaw, Tailscale SSH, Magento PolyShell, Oracle EBS CVE-2026-101767, SkyW4lker device-code phishing, the GMO breach and post-quantum deadlines, with detection rules and a 72-hour plan.
Read story ↗Explore PHP2Shell, Node2Shell, SafePay ransomware and AI coding agent risks in the October 26 issue of MAG212 CYBER, with practical defense guidance and sources.
Read story ↗Updated 29 October 2026 (Rev. 3): new cover, clickable sources and bookmarks, defanged indicators with a downloadable IOC list (CSV), and a colophon with our disclosures. Corrections: page 15 now attributes the frontier-AI guidance to New Zealand’s NCSC (not the UK’s) and sources the Mozilla…
Read story ↗Nous utilisons Microsoft Clarity Nous utilisons des cookies analytiques pour comprendre comment les lecteurs utilisent nos articles et améliorer notre site. Aucune publicité, jamais sur nos pages d'outils. politique de confidentialité