Latest cybersecurity dispatches

Fresh reporting on active vulnerabilities, security patches, incident response, and threat research for defenders.

Articles: 407
Page: 2 / 51
Desks: 9

Data graphic: Juniper bulletin JSA112183 fixes eight flaws, two rated CVSS 9.8 Critical with no workarounds. A diagram shows a crafted salt minion ID reaching the AutomatedProvisioner, then OS command injection CVE-2026-103406 , giving root on the Conductor. Fixed in 7.0.5, 7.1.7 and 7.2.3.

highExploits Cve 2026 103406

Juniper Patches Two CVSS 9.8 Flaws in Session Smart Router and Conductor, With No Workaround

JSA112183 fixes eight flaws, including root command injection on Conductor via a salt minion ID and admin access to unonboarded routers. Upgrade now.

Oct 31 · 3 min

Data graphic: Cisco ASA and FTD SSL VPN crash flaw CVE-2026-76418, rated CVSS 3.1 8.6 High, shown as a huge red 8.6 beside an "Exploited, active October 2026" stamp. Stats below read: CISA KEV due date 1 November, and no credentials needed.

highExploits Cve 2026 76418

Cisco ASA and FTD SSL VPN Crash Flaw CVE-2026-76418 Is Being Exploited; CISA Sets a 1 November Deadline

One unauthenticated SSL VPN request reloads ASA or FTD when a tunnel group uses secondary authentication. Exploited, on KEV, with fixes per train.

Oct 31 · 4 min

Data graphic: a Known exploited seal over Fortinet CVE-2025-61624, rated CVSS 6.0 Medium and admin-only, yet used to go from FortiOS admin to root.

highExploits Cve 2025 61624

Admin-Only Fortinet Flaw CVE-2025-61624 Used to Gain Root, Now on CISA KEV

Unit 42 says attackers used Fortinet's admin-only CLI path traversal CVE-2025-61624 to reach root. CISA added it to KEV on 16 October 2026.

Oct 27 · 4 min

Data graphic: CVE-2026-116816 attack chain in llama.cpp, from a crafted GGUF file through model load and the plamo2 tokenizer parsing a <0x-1> byte token to a write 4 to 60 bytes before a 1024-byte buffer; CVSS 4.0 8.5 VulnCheck , fixed in b10261.

elevatedAI Security Cve 2026 116816

llama.cpp CVE-2026-116816: A Crafted GGUF File Corrupts the Heap on Load, Fixed Since b10261

A crafted GGUF file can write past a heap buffer in llama.cpp on model load. The fix shipped in b10261 twelve weeks before the CVE; check your builds.

Oct 27 · 4 min

Data graphic: PoeLLM attack chain from exposed LiteLLM, Ollama and Gitea servers, through CVE-2026-42271 and a GitHub poem decoded to a C2 address, to XMRig and Iron miners

elevatedAI Security Llmjacking

PoeLLM Botnet Hides Its C2 in a GitHub Poem and Turns Exposed LiteLLM, Ollama and Gitea Servers Into Miners

Lumen says PoeLLM decodes its C2 address from a GitHub poem, then exploits exposed LiteLLM, Ollama, Gotenberg and Gitea servers to run XMRig and Iron miners.

Oct 27 · 3 min

Data graphic: vendor-run scores for Nanbeige4.3-33B and Qwen3.8-27B on Terminal-Bench 2.1, DeepSWE, SWE-Bench Pro and GDPval, showing Nanbeige ahead on the first two and Qwen ahead on the last two.

watchResearch Nanbeige 4 3 33b

Nanbeige4.3-33B vs Qwen3.8-27B: Where the Vendor Benchmarks Diverge, and Which GGUF Fits 16, 24 or 32 GB

Nanbeige's new 33B open model leads Qwen3.8-27B on terminal and agent tasks in vendor-run tests, loses SWE-Bench Pro, and needs care to fit 16-32 GB.

Oct 27 · 5 min

Data graphic: Skynet mode allows an LLMjacking agent up to 100,000 unattended steps with 74 offensive tools, captured by a Symantec honeypot.

elevatedAI Security Llmjacking

Symantec Honeypot Captures Skynet LLMjacking Agent With 74 Attack Tools

A Symantec honeypot caught an autonomous agent built to hijack exposed AI models: 74 attack tools, a 100,000-step budget and a hidden XMRig miner. Nothing ran.

Oct 27 · 5 min

Data graphic: the CVE-2026-110936 attack chain, from a ClickFix lure to msiexec running AllMyBasic.msi, to a genuine signed Siemens Software Center 3.5.8.7, which sideloads a malicious archive.dll. Siemens scores the flaw 8.4 under CVSS v4.0; the fix is V4.0.9.8.

highExploits Cve 2026 110936

Siemens Software Center DLL flaw CVE-2026-110936 exploited in ClickFix attacks

Attackers paired a genuine signed Siemens Software Center 3.5.8.7 with a malicious archive.dll. CISA set a 3 November KEV deadline; the fix is V4.0.9.8.

Oct 27 · 4 min