The Wire — Threat Brief

Campus	Headline	Source	Age	CVE
MED	Fastfetch 2.70.0 changes how Disk free space is reported	Help Net Security	23m	—
MED	SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape	Dark Reading	6h	—
MED	Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory	The Hacker News	8h	CVE-2026-99999
HIGH	U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog Exploited	Security Affairs	9h	—
MED	ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More	The Hacker News	9h	—
MED	Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government	Security Affairs	10h	—
MED	KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims	Help Net Security	14h	—
MED	Fake CAPTCHAs are tricking users into running malware on their own devices	Help Net Security	15h	—
HIGH	NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks	The Hacker News	15h	—
MED	Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing	The Hacker News	16h	—
HIGH	Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules	The Hacker News	16h	—
HIGH	Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation	The Hacker News	17h	CVE-2026-0322
MED	Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool	Infosecurity Magazine	17h	CVE-2026-35029 +1
MED	CikaBika Bot RAT Uses Discord for C&C	SecurityWeek	17h	—
HIGH	CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products Exploited	Help Net Security	18h	CVE-2026-0322 +3
MED	Microsoft disrupts phishing network behind more than a billion scam messages	Help Net Security	18h	—
MED	Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages	Infosecurity Magazine	18h	—
HIGH	Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise	Security Affairs	19h	CVE-2026-76519
MED	Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts	The Hacker News	21h	CVE-2026-105740
HIGH	Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution Exploited	SecurityWeek	21h	—
MED	AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches Exploited	The Hacker News	22h	CVE-2026-105133 +1
HIGH	Cisco Warns of Exploited Secure Email Gateway Vulnerability Exploited	SecurityWeek	22h	—
MED	Immuta CISO predicts critical AI incidents at major enterprises within 18 months	Help Net Security	23h	—
HIGH	Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles Exploited	Dark Reading	31h	CVE-2026-104935
HIGH	U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog Exploited	Security Affairs	31h	CVE-2026-96951
MED	Yam Store: The Phishing Network Behind a Billion Messages	Dark Reading	31h	—
HIGH	Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability	The Hacker News	34h	—
MED	Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App Exploited	The Hacker News	35h	—
MED	Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages	The Hacker News	35h	—
MED	U.K. Sanctions Cryptomus for RU Money Laundering	Krebs on Security	38h	—
MED	Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates Exploited	Security Affairs	38h	—
HIGH	CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts Exploited	The Hacker News	40h	CVE-2026-104935
MED	Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days	The Hacker News	41h	—
MED	An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.	The Hacker News	41h	—
HIGH	Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities Exploited	Security Affairs	42h	—
MED	Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched	Infosecurity Magazine	44h	—
MED	Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave	The Hacker News	46h	—
MED	How a leaked builder of XWorm turned a remote access trojan into a surveillance kit Exploited	Security Affairs	47h	—
MED	Ransomware Gangs Embrace Physical Threats, Family Stalking?	Dark Reading	47h	—
HIGH	Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug Exploited	The Hacker News	2d	—
MED	Microsoft Patches More Than 1,400 Security Flaws	Krebs on Security	2d	—
MED	Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday	Dark Reading	2d	—
MED	North Korea Phishes Ukrainians for War Intel	Dark Reading	2d	—
MED	October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th) Exploited	SANS ISC	2d	—
MED	Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another	The Hacker News	2d	—
HIGH	Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far Exploited	The Hacker News	2d	—
MED	SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft	The Hacker News	2d	—
MED	Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool Exploited	Infosecurity Magazine	3d	—
MED	Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control	The Hacker News	3d	—
HIGH	Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack Exploited	Dark Reading	3d	—
MED	Prominent Ransomware Negotiator Faces Extortion Charges	Dark Reading	3d	—
MED	Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings	Infosecurity Magazine	4d	—
HIGH	Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups Exploited	Infosecurity Magazine	4d	—
MED	FBI Arrests Executive at Ransomware Negotiation Firm	Krebs on Security	6d	—
HIGH	Q3 2026 Sets New Record for Ransomware Attacks	Infosecurity Magazine	7d	—
MED	AI Training Critical as Governance Challenges Grow	Infosecurity Magazine	7d	—
MED	Critical Flaw in Multiple Atlassian Products Exploited in the Wild Exploited	Infosecurity Magazine	8d	—
MED	FBI and Secret Service Warn of FortiBleed Lockout Threat	Infosecurity Magazine	8d	—
MED	Attackers Hide AI Prompt Injections Inside Phishing Emails	Infosecurity Magazine	9d	—
MED	Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One Exploited	Infosecurity Magazine	9d	—
MED	Critical Healthcare Systems Aren't Quantum-Ready	Dark Reading	9d	—
MED	Nikkei Discloses Two Employee Cloud Account Compromises	Infosecurity Magazine	10d	—
HIGH	Chinese Hackers Impersonate US Officials for AI Cyber Espionage	Dark Reading	11d	—
HIGH	Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response Exploited	Dark Reading	13d	—

Showing 64 of 64 matching stories (164 in the last 14 days from 54 sources). Relevance and tags come from fixed keyword rules. Exploit data: CISA Known Exploited Vulnerabilities (CC0) and EPSS by FIRST (first.org/epss).

Running on the core news feeds only. Bind the WIRE KV namespace and the cron trigger to turn on all sources and exploit data.

Campus-relevant

Stack

Topics

Sources