Palette Technologies
Cyber Info

Cyber News

Reporting and advisories we read daily to stay ahead of what is actually being exploited.

Get Protected
Latest

Cyber Headlines

Pulled from the sources our analysts read every morning. Updated automatically — last refreshed 30 Oct 2026.

BleepingComputer30 Oct 2026Critical Linux kernel flaw allows remote root attacks on MPTCP serversSecurity researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) liRead at source
The Hacker News30 Oct 2026Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideChinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activitRead at source
BleepingComputer30 Oct 2026Trezor warns of suspected crypto-theft implant in hardware walletHardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia. [...]Read at source
The Hacker News30 Oct 2026TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemTeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewerRead at source
BleepingComputer30 Oct 2026Malicious Claude Code extension on Cursor planted SSH backdoorsA malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to insRead at source
The Hacker News30 Oct 2026WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursThreat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates to a case of reRead at source
BleepingComputer30 Oct 2026SS7 and Diameter Attacks: How Signaling Flaws Expose Your PhoneFlaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how thRead at source
BleepingComputer30 Oct 2026CISA says max severity GitLab flaw now exploited in the wildAttackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...]Read at source
The Hacker News30 Oct 2026Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilisA Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. IRead at source
CISA Advisories30 Oct 2026CISA Adds Two Known Exploited Vulnerabilities to Catalog<p>CISA has added two new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p> <ulRead at source
The Hacker News30 Oct 2026Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them MovingThe alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications available need proof that the change won’t break anything. Their Read at source
BleepingComputer30 Oct 2026Microsoft finally fixes VPN issues caused by September updatesMicrosoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates. [...]Read at source
The Hacker News30 Oct 2026Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in PrisonAhmad Umar Agha, a Syrian Electronic Army hacker known online as "Th3Pr0," has been sentenced by a U.S. federal court to 42 months in prison for his role in a hacking conspiracy that targeted Western news outlets. The coRead at source
SANS Internet Storm Center30 Oct 2026ISC Stormcast For Friday, October 30th, 2026 https://isc.sans.edu/podcastdetail/10158, (Fri, Oct 30th)Read at source
CISA Advisories29 Oct 2026Hitachi Energy CoreTec Product<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-302-03.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Hitachi Energy is aware of OS command injection and DiRead at source
CISA Advisories29 Oct 2026Hitachi Energy TRO600 series products<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-302-02.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Hitachi Energy is aware of multiple vulnerabilities thRead at source
CISA Advisories29 Oct 2026Siemens Mendix SAML Module<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-302-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Mendix SAML module contains an authentication bypass vRead at source
CISA Advisories29 Oct 2026CISA Adds Two Known Exploited Vulnerabilities to Catalog<p>CISA has added two new vulnerabilities to its <a href="https://edit.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p> <uRead at source

Reading the news is not a security programme

Headlines tell you what happened to somebody else. Palette Technologies turns that into what it means for you — monitoring, testing and a prioritised plan. Sign up and we will start with your scope.

Sign Up With PaletteExplore Services
Actively Exploited

CISA Known Exploited Vulnerabilities

The newest additions to the federal catalogue of vulnerabilities with confirmed exploitation in the wild. 1,766 entries in catalogue 2026.10.30.

Full catalogue
CVEVendor / productVulnerabilityAddedPatch due
CVE-2026-118527IvantiConnect SecureIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability2026-10-302026-11-13
CVE-2026-111357IvantiConnect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerability2026-10-302026-11-02
CVE-2026-97229GitLabCommunity Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability2026-10-292026-11-01
CVE-2026-76418CiscoSecure Firewall ASA Software and Cisco Secure FTD SoftwareCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability2026-10-292026-11-01
CVE-2026-41709BroadcomVMware ESXBroadcom VMWare ESX Insufficient Logging Vulnerability2026-10-282026-11-11
CVE-2026-46300LinuxKernelLinux Kernel Missing Initialization of a Variable Vulnerability2026-10-282026-10-31
CVE-2026-48356AdobeCommerce and MagentoAdobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability2026-10-272026-11-10
CVE-2026-111497GoogleBrotliGoogle Brotli Unchecked Return Value Vulnerability2026-10-272026-11-10
CVE-2026-109618PHP GroupPHPPHP Memory Corruption Vulnerability2026-10-262026-10-29
CVE-2026-109619PHP GroupPHPPHP Stale Internal Request-State Vulnerability2026-10-262026-10-29

Do any of these run in your estate?

Most organisations cannot answer that quickly, which is the real problem. Our vulnerability management service tracks the catalogue against your actual inventory and tells you what to patch first — start with a scoping form and we will size it.

Start Your AssessmentSee Managed Services
Go Deeper

The Sources We Follow

CISA Known Exploited Vulnerabilities Catalogcisa.gov
CISA Alerts & Advisoriescisa.gov
The Hacker Newsthehackernews.com
BleepingComputerbleepingcomputer.com
Krebs on Securitykrebsonsecurity.com
SANS Internet Storm Centerisc.sans.edu
Need Help?

Book a Consultation

Tell us what is keeping you up at night — an audit deadline, a cloud migration, a board asking hard questions. We will tell you honestly whether we can help, and what it takes.

Contact UsProspect Intake Form

What happens next

  1. 1You send us the detail — a short message, or the intake form if the engagement is already taking shape.
  2. 2We reply within one business day, and tell you honestly if we are not the right fit.
  3. 3A scoping call, then a fixed-price proposal covering the work, the reporting and the retest.
info@palettech.com