The Wire — Threat Brief

Campus	Headline	Source	Age	CVE
HIGH	U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog Exploited	Security Affairs	9h	—
HIGH	CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products Exploited	Help Net Security	18h	CVE-2026-0322 +3
HIGH	Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution Exploited	SecurityWeek	21h	—
MED	AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches Exploited	The Hacker News	22h	CVE-2026-105133 +1
HIGH	Cisco Warns of Exploited Secure Email Gateway Vulnerability Exploited	SecurityWeek	22h	—
HIGH	Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles Exploited	Dark Reading	31h	CVE-2026-104935
HIGH	U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog Exploited	Security Affairs	31h	CVE-2026-96951
MED	Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App Exploited	The Hacker News	35h	—
MED	Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates Exploited	Security Affairs	38h	—
HIGH	CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts Exploited	The Hacker News	40h	CVE-2026-104935
HIGH	Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities Exploited	Security Affairs	42h	—
MED	How a leaked builder of XWorm turned a remote access trojan into a surveillance kit Exploited	Security Affairs	47h	—
HIGH	Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug Exploited	The Hacker News	2d	—
MED	October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th) Exploited	SANS ISC	2d	—
HIGH	Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far Exploited	The Hacker News	2d	—
MED	Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool Exploited	Infosecurity Magazine	3d	—
HIGH	Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack Exploited	Dark Reading	3d	—
HIGH	Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups Exploited	Infosecurity Magazine	4d	—
MED	Critical Flaw in Multiple Atlassian Products Exploited in the Wild Exploited	Infosecurity Magazine	8d	—
MED	Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One Exploited	Infosecurity Magazine	9d	—
HIGH	Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response Exploited	Dark Reading	13d	—

Showing 21 of 21 matching stories (164 in the last 14 days from 54 sources). Relevance and tags come from fixed keyword rules. Exploit data: CISA Known Exploited Vulnerabilities (CC0) and EPSS by FIRST (first.org/epss).

Running on the core news feeds only. Bind the WIRE KV namespace and the cron trigger to turn on all sources and exploit data.

Actively exploited

Stack

Topics

Sources