{"id":3633,"date":"2026-10-29T07:24:25","date_gmt":"2026-10-29T14:24:25","guid":{"rendered":"https:\/\/cyber.mag212.com\/the-edge-the-cloud-and-the-code-mag212-cyber-october-29-2026\/"},"modified":"2026-10-30T13:19:27","modified_gmt":"2026-10-30T20:19:27","slug":"the-edge-the-cloud-and-the-code-mag212-cyber-october-29-2026","status":"publish","type":"post","link":"https:\/\/cyber.mag212.com\/fr\/the-edge-the-cloud-and-the-code-mag212-cyber-october-29-2026\/","title":{"rendered":"L'Edge, le Cloud et le Code : MAG212 CYBER Daily Edition, 29 octobre 2026"},"content":{"rendered":"
\n
Read the full edition (PDF, 13 pages, 2.8 MB) \u2192<\/a><\/div>\n<\/div>\n\n\n\n

Firewalls, SD-WAN controllers, hypervisors and build pipelines: the systems that hold trust together were the targets this week.<\/strong> Today’s edition covers eight stories, each graded by how strong the evidence is, with fixed versions, read-only check commands and a 24-hour response plan.<\/p>\n\n\n\n

What needs attention today<\/h2>\n\n\n\n
\n
Story<\/th>Status<\/th>Gravit\u00e9<\/th>Do this today<\/th><\/tr><\/thead>
Cisco ASA\/FTD<\/strong> SSL VPN reload (CVE-2026-76418)<\/td>Exploited<\/td>High 8.6<\/td>Check for secondary authentication on any tunnel group, then upgrade to the fixed release<\/td><\/tr>\n
Cisco SD-WAN<\/strong> KeyDrift implant (CVE-2026-20127)<\/td>Assessed<\/td>Critical 10.0<\/td>Confirm controllers run fixed releases; hunt for the listed artifacts<\/td><\/tr>\n
Silent Train<\/strong>, Volt Typhoon’s relay network<\/td>Reported<\/td>Research<\/td>Inventory internet-facing management platforms and who can reach them<\/td><\/tr>\n
VMware ESX<\/strong> logging flaw (CVE-2026-41709)<\/td>Exploited (CISA KEV, 28 Oct)<\/td>Low 2.7<\/td>Patch the right branch; confirm logs reach a protected collector<\/td><\/tr>\n
Alpine GitLab<\/strong>: app patched, Ruby wasn’t (CVE-2026-97229)<\/td>Attempted<\/td>Critical 10.0<\/td>Check the Ruby inside every GitLab image you run<\/td><\/tr>\n
So-net<\/strong>: 2.58 million customer records<\/td>Confirmed<\/td>Breach<\/td>Affected users: expect convincing phishing; follow the official notice<\/td><\/tr>\n
iRhythm<\/strong>: patient data via social engineering<\/td>Confirmed<\/td>Breach<\/td>Patients: consider a fraud alert or credit freeze; review insurance statements<\/td><\/tr>\n
GitHub<\/strong> package firewall for npm<\/td>Confirmed<\/td>Defence<\/td>Enterprise Cloud teams: pilot it on one CI workflow<\/td><\/tr>\n<\/tbody><\/table>
Status shows how strong the evidence is: Confirmed\/Exploited (vendor, CISA or the affected organisation), Reported\/Assessed (named researchers), Attempted (attempts seen, success not shown).<\/figcaption><\/figure>\n\n\n\n

Inside the edition<\/h2>\n\n\n\n