CATEGORY
Category: Threat Digest
The daily threat intelligence digest: exploits, zero-days, breaches, crypto and AI incidents, grouped to avoid duplicate coverage and ranked by criticality, with sources for every entry.
-
Threat digest: 2026-10-31
A record $6.3bn theft from Binance, attributed to North Korea, dominates the day, alongside two exploited Ivanti VPN flaws, a CVSS 10.0 GitLab remote code execution flaw used…
-
Threat digest: 2026-10-30
Binance confirms a breach with up to $5.8 billion in outflows in what may be the largest exchange theft on record, CISA adds GitLab and Cisco flaws to…
-
Threat digest: 2026-10-29
PHP2Shell exploitation escalates into a rooted 25-server intrusion that reached a US government-affiliated network, two more actively exploited flaws enter CISA's KEV list with deadlines inside a fortnight,…
-
Threat digest: 2026-10-28
Two CISA KEV additions, an exploited Adobe Commerce upload flaw and the Brotli memory bug, lead a day that also brought a ransomware threat against 26,739 Onamae cloud…
-
Threat digest: 2026-10-27
CISA adds PHP2Shell to its exploited catalog as honeypots record working shells, Microsoft and others rush emergency patches for the Node2Shell Brotli flaw, and a 525,000 person breach…
-
Threat digest: 2026-10-26
An agentic attacker reached MFA secrets at a European government body within two hours, Tailscale SSH flaws went public with no patch, Microsoft shipped unscheduled .NET fixes, and…
-
Threat digest: 2026-10-25
PHP exploitation attempts keep climbing, a leaked LiteLLM master key turned into a poisoned package release, a ten week token replay campaign slipped past MFA at 79 organisations,…
-
Threat digest: 2026-10-24
PHP2Shell exploitation attempts escalated into Mirai botnet delivery while researchers published a working ASLR bypass, CISA added two more exploited flaws to its KEV catalog, and an AI…
-
Threat digest: 2026-10-23
PHP2Shell exploitation was traced back four days before its patches shipped, attackers exploited a third VeloCloud Orchestrator zero-day, and an Indian certificate authority began exiting the TLS business…