https://cyber-threat.net/testmetest-npm-worm-github-init-js-hooks/ Cyber-Threat.net en 2026-10-27T10:06:37+00:00 testmetest npm worm: check for .github/init.js and AI-assistant hooks, and remove persistence before you revoke tokens https://cyber-threat.net/patch-wave-has-arrived/ Cyber-Threat.net en 2026-10-27T07:30:00+00:00 The patch wave has arrived: what the NCSC told you to do in May https://cyber-threat.net/node2shell-brotli-cve-2026-111497/ Cyber-Threat.net en 2026-10-26T13:24:50+00:00 Node2Shell (CVE-2026-111497): patch Node.js, .NET and anything else that decodes Brotli https://cyber-threat.net/siemens-software-center-cve-2026-110936-romulus-clickfix/ Cyber-Threat.net en 2026-10-26T08:47:32+00:00 Siemens Software Center CVE-2026-110936: attackers bring their own signed old copy https://cyber-threat.net/siteguard-server-edition-cve-2026-106931-exploited/ Cyber-Threat.net en 2026-10-26T08:47:30+00:00 SiteGuard Server Edition CVE-2026-106931: exploited, save the diagnostics before you patch https://cyber-threat.net/collabora-built-in-code-server-cve-2026-110447-nextcloud-exploited/ Cyber-Threat.net en 2026-10-26T08:47:28+00:00 Collabora built-in CODE Server CVE-2026-110447: exploited on Nextcloud, upgrade or remove the app https://cyber-threat.net/arista-velocloud-orchestrator-cve-2026-114625-exploited/ Cyber-Threat.net en 2026-10-26T08:47:26+00:00 Arista VeloCloud Orchestrator CVE-2026-114625: exploited, patch on-prem VCO now https://cyber-threat.net/nvidia-simready-ot-supply-chain/ Cyber-Threat.net en 2026-10-26T01:56:42+00:00 Free robot models, hidden risks: what NVIDIA’s SimReady library means for the OT supply chain