The highest-impact items — the "if you only read one thing today" list, pulled from across every section.

Saturday, October 24, 2026

CRITICALBrotli Decoder Flaw (CVE-2026-111497) Affects Node.js, Bun, Python, and Morerce · memory-corruption · brotli · supply-chainCRITICALLiteLLM Master Key Leak Leads to Supply Chain Attack and Info-Stealer Distributionsupply-chain · github · credential-theft · ai-agents

Friday, October 23, 2026

CRITICALPHP2Shell Critical RCE Vulnerabilities Under Active Exploitationphp · rce · zero-day · exploitation

Thursday, October 22, 2026

CRITICALeMudhra Exits Global SSL/TLS Business After Intermediate CA Key Compromisecertificate-authority · ssltls · cryptography

Wednesday, October 21, 2026

CRITICALCritical GitLab RCE Affects All Versions Since 2014gitlab · rce · vulnerability

Sunday, October 18, 2026

CRITICALConnectWise Cloud Backup Compromised, Leading to Microsoft 365 Tenant Breachessupply-chain · breach · microsoft-365 · msp

Saturday, October 17, 2026

CRITICALDrupal Patches Critical RCE Flaws, Exploits Expecteddrupal · rce · vulnerability · cms

Friday, October 16, 2026

CRITICALBeyondTrust Remote Support Zero-Day Exploited by China-Linked Groupzero-day · beyondtrust · apt · exploitationCRITICALOpenBSD Root Exploit Chains 37-Year-Old Bugopenbsd · lpe · kernel-exploit · vulnerabilityCRITICALCandiru Spyware Delivered via Zero-Click Targeted Adsspyware · zero-click · candiru · ad-tech

Sunday, October 11, 2026

CRITICALNippon Columbia Data Breach Exposes 8.6 Million Karaoke Fan Recordsdata-breach · malware · supply-chain · japan

Saturday, October 10, 2026

CRITICALChinese Hacker Uses ARTEX AI and Claude Agents in South Korean Bank Attacksai · apt · cyberattack · south-korea

Friday, October 9, 2026

CRITICALCredential-Stealing GitHub Actions Workflows Planted in Thousands of Repositoriessupply-chain · github · credential-theft · open-sourceCRITICALWorking Exploit Published for Pre-Auth AnyDesk Linux Root RCE Flawrce · exploit · linux · anydeskCRITICALMax Severity SonicWall SMA1000 Flaw Actively Exploited in Attacksvulnerability · exploit · sonicwall · vpn

Saturday, October 3, 2026

HIGHShinyHunters Suspect 'Rey' Detained in Jordan, Cooperating with FBIcybercrime · law-enforcement · threat-actor

Friday, October 2, 2026

CRITICALGitLab Patches Critical RCE in AI Gateway Service (CVE-2026-63688)cve · rce · gitlab · aiCRITICALCritical FortiMail Zero-Day (CVE-2026-104286) Actively Exploited for Arbitrary File Writescve · zero-day · fortinet · exploit

Thursday, October 1, 2026

HIGHPolice Dismantle KillSec Ransomware Gang, Allegedly Led by 16-Year-Oldransomware · law-enforcement · cybercrimeCRITICALCISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEVcve · cisco · exploit · authentication

Sunday, September 27, 2026

CRITICALTwo Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitationzero-day · rce · citrix · exploitation

Saturday, September 26, 2026

CRITICALCISA Warns of Actively Exploited SharePoint and MikroTik RouterOS Flawscisa · sharepoint · mikrotik · exploitationCRITICALKiteworks Urges Customers to Shut Down Systems Over Imminent Cyber Attack Warningkiteworks · zero-day · breach-warning · incident-response

Wednesday, September 23, 2026

CRITICALF5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCEzero-day · rce · f5 · exploitationCRITICALChinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malwarezero-day · chrome · windows · malware