https://threatfrontier.com/articles/ivanti-connect-secure-cve-2026-111357-cve-2026-118527-kev-chain ThreatFrontier.com en 2026-10-31T06:40:00.037Z CISA Adds Two More Ivanti Connect Secure Flaws to KEV as Links in the CVE-2026-104935 Exploitation Chain https://threatfrontier.com/articles/nemotron-3-5-transcribe-30b-a4b-wer-hardware-vram ThreatFrontier.com en 2026-10-31T06:39:57.287Z Nemotron 3.5 Transcribe Posts 4.71% English WER in Open Weights, and Fits a 32 GB GPU Only in 4-Bit https://threatfrontier.com/articles/lfm3-1-7b-vs-qwen3-5-9b-benchmarks-ollama ThreatFrontier.com en 2026-10-31T06:39:54.626Z LFM3-1.7B vs Qwen3.5-9B: The 1.7B Model Wins on Tool Calls, Then Loses on Reasoning and Long Context https://threatfrontier.com/articles/embrace-embedded-browser-flaws-cursor-copilot-claude-desktop-codex-vs-code ThreatFrontier.com en 2026-10-31T06:39:51.923Z EMBRACE: Embedded Browsers in Cursor, Copilot, Claude Desktop, Codex and VS Code Leak Files and Run Code https://threatfrontier.com/articles/ollama-0-40-13-speech-endpoint-d3-lfm3-dflash2 ThreatFrontier.com en 2026-10-31T06:38:59.896Z Ollama 0.40.11 to 0.40.13: An OpenAI-Compatible Speech Endpoint, d3 Decision Models, LFM3 and DFlash2 https://threatfrontier.com/articles/magento-polyshell-cve-2026-48356-cisa-kev-fixed-builds-webshells ThreatFrontier.com en 2026-10-31T06:37:11.666Z CISA Adds Magento PolyShell Upload Flaw CVE-2026-48356 to KEV: Fixed Builds and How to Hunt for Webshells https://threatfrontier.com/articles/vmware-esx-cve-2026-41709-logging-flaw-cisa-kev ThreatFrontier.com en 2026-10-31T06:37:09.914Z CISA Adds a Low-Severity VMware ESX Logging Flaw to KEV, a Gap That Lets Admin Actions Go Unrecorded https://threatfrontier.com/articles/cognition-agent-server-cve-2026-109437-unauthenticated-rce ThreatFrontier.com en 2026-10-31T06:37:08.149Z Cognition Agent Server Before 0.13.0 Lets Anyone on the Network Run Shell Commands (CVE-2026-109437) https://threatfrontier.com/articles/juniper-session-smart-router-conductor-cve-2026-103406-cve-2026-103409 ThreatFrontier.com en 2026-10-31T06:37:06.363Z Juniper Patches Two CVSS 9.8 Flaws in Session Smart Router and Conductor, With No Workaround https://threatfrontier.com/articles/cisco-asa-ftd-cve-2026-76418-ssl-vpn-dos-exploited-kev ThreatFrontier.com en 2026-10-31T06:37:04.461Z Cisco ASA and FTD SSL VPN Crash Flaw CVE-2026-76418 Is Being Exploited; CISA Sets a 1 November Deadline