← Back to Blog
Security News
Security News — 30 October 2026
A daily, automatically-compiled digest of the cyber security stories that broke in the last 24 hours, drawn from 8 trusted feeds. Each entry is a short excerpt — follow the link to read the full article at its original publisher. Compiled 30 October 2026 · 18 items.
Urgent Vulnerabilities 1
Actively exploited, critical, or high-severity flaws — patch or mitigate first.
CISA Current Activity30 Oct
KEV · exploited
- Exploited
- Yes — CISA KEV
- Product
- Ivanti Connect Secure
- Impact
- Missing authentication
- Audience
- Network/firewall admins
- Action
- Patch per vendor / CISA KEV
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-20…
Read at source →
Threat Activity 13
Malware, campaigns and adversary tradecraft.
The Hacker News30 Oct
Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates to a case of remote code execution…
Read at source →
BleepingComputer30 Oct
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...]
Read at source →
The Hacker News30 Oct
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine i…
Read at source →
Dark Reading30 Oct
A security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers.
Read at source →
Dark Reading30 Oct
Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).
Read at source →
Dark Reading30 Oct
A recent law enforcement operation to dismantle harmful scam centers was a big success. A threat intelligence expert walks us through what happened and why he wants more of the same.
Read at source →
The Hacker News30 Oct
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attribut…
Read at source →
Microsoft Security Blog30 Oct
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos. The post From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intr…
Read at source →
BleepingComputer30 Oct
Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia. [...]
Read at source →
Dark Reading30 Oct
I ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paese.
Read at source →
BleepingComputer30 Oct
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH…
Read at source →
BleepingComputer30 Oct
Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how these attacks exploit…
Read at source →
The Hacker News30 Oct
A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyo…
Read at source →
Research & Detection 1
Detection engineering, tooling and defensive analysis.
SANS Internet Storm Center (Handler Diary)30 Oct
Read at source →
Policy & Commentary 3
Industry, executive and AI-security perspective.
Schneier on Security30 Oct
Neat video : The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean. As usual, you can also use this squid post to talk abo…
Read at source →
Daniel Miessler30 Oct
A slumped figure sits beside a dim ember in the deep purple shadow of a stone tower, while the same figure climbs its lit face holding a lantern high/images/energy-changes-the-frames.webp/images/energy-changes-the-frames.webp I think so mu…
Read at source →
Schneier on Security30 Oct
This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing…
Read at source →