https://cyber-threat.net/irhythm-data-breach-8-2-million-hhs/ Cyber-Threat.net en 2026-10-29T12:17:42+00:00 iRhythm data breach toll hits 8.2 million in HHS filing https://cyber-threat.net/cisco-sdwan-keydrift-cve-2026-20127-uat-11473/ Cyber-Threat.net en 2026-10-29T10:34:05+00:00 Cisco SD-WAN KeyDrift: hunt UAT-11473 after CVE-2026-20127 https://cyber-threat.net/cisco-asa-ftd-cve-2026-76418-ssl-vpn-dos/ Cyber-Threat.net en 2026-10-29T10:32:30+00:00 Cisco ASA/FTD CVE-2026-76418: second SSL VPN DoS zero-day https://cyber-threat.net/week-enforcement-hit-back/ Cyber-Threat.net en 2026-10-29T10:24:21+00:00 The week enforcement hit back https://cyber-threat.net/political-party-mail-host-breach-gdpr/ Cyber-Threat.net en 2026-10-29T10:23:36+00:00 When a party’s mail host is breached: GDPR duties https://cyber-threat.net/openhands-agent-sandbox-cve-2026-112346/ Cyber-Threat.net en 2026-10-29T10:01:31+00:00 Exposed OpenHands agent sandboxes: upgrade, then set a session key (CVE-2026-112346) https://cyber-threat.net/tailscale-ssh-serve-four-bulletins-1104-4/ Cyber-Threat.net en 2026-10-29T10:00:00+00:00 Tailscale SSH/Serve: four bulletins fixed in 1.104.4 https://cyber-threat.net/edk2-pxe-cve-2026-97631-restrict-network-boot/ Cyber-Threat.net en 2026-10-29T09:02:18+00:00 EDK II PXE pre-boot RCE: restrict network boot now https://cyber-threat.net/esxi-cve-2026-41709-kev-logging-gap-zero-day/ Cyber-Threat.net en 2026-10-29T09:01:58+00:00 ESXi CVE-2026-41709: KEV logging gap used as zero-day https://cyber-threat.net/ncsc-agentic-ai-guidance-explained/ Cyber-Threat.net en 2026-10-29T07:30:00+00:00 The NCSC’s agentic AI guidance, explained https://cyber-threat.net/php2shell-fragnesia-dream-25-rooted-servers/ Cyber-Threat.net en 2026-10-28T20:42:13+00:00 PHP2Shell + Fragnesia: Dream finds 25 rooted servers https://cyber-threat.net/volt-typhoon-silent-train-relay-framework/ Cyber-Threat.net en 2026-10-28T20:37:32+00:00 Silent Train: Volt Typhoon’s disposable relay for zero-day access https://cyber-threat.net/chrome-156-cve-2026-118306-filesystem-sandbox-escape/ Cyber-Threat.net en 2026-10-28T20:20:00+00:00 Chrome 156: FileSystem RCE outside the sandbox (CVE-2026-118306) https://cyber-threat.net/hunt-ivanti-connect-secure-x-dscgi-path/ Cyber-Threat.net en 2026-10-28T13:51:49+00:00 Hunt: Ivanti Connect Secure X-DSCGI-PATH mismatch https://cyber-threat.net/hunt-beyondtrust-armory-castle-sawfly-bareclaw/ Cyber-Threat.net en 2026-10-28T13:51:39+00:00 Hunt: BeyondTrust ARMORY CASTLE SAWFLY / BARECLAW https://cyber-threat.net/ivanti-connect-secure-cve-2026-104935-auth-bypass/ Cyber-Threat.net en 2026-10-28T13:35:21+00:00 Ivanti Connect Secure CVE-2026-104935: auth bypass to RCE https://cyber-threat.net/beyondtrust-remote-support-cve-2026-102764-armory-castle/ Cyber-Threat.net en 2026-10-28T13:35:08+00:00 BeyondTrust RS CVE-2026-102764: ARMORY CASTLE zero-day https://cyber-threat.net/japan-active-cyber-defence-1-october-2026/ Cyber-Threat.net en 2026-10-28T13:22:15+00:00 Japan’s active cyber defence: live since 1 October https://cyber-threat.net/oracle-ebs-cve-2026-101767-probes-sqli-rce/ Cyber-Threat.net en 2026-10-28T12:19:35+00:00 Oracle EBS CVE-2026-101767: probes hit SQLi-to-RCE https://cyber-threat.net/patch-now-apple-kev-mlflow-aruba/ Cyber-Threat.net en 2026-10-28T09:17:21+00:00 Patch now: Apple KEV flaw, MLflow RCE, eight Aruba 10.0s https://cyber-threat.net/peoplesoft-cve-2026-35273-ssrf-rce-mass-exploited/ Cyber-Threat.net en 2026-10-28T09:08:07+00:00 PeopleSoft CVE-2026-35273: SSRF to RCE, still mass-exploited https://cyber-threat.net/hunt-magento-polyshell-cms-loader-domains/ Cyber-Threat.net en 2026-10-28T00:12:29+00:00 Hunt: Magento PolyShell CMS loader domains https://cyber-threat.net/adobe-commerce-magento-cve-2026-48356-polyshell-exploited/ Cyber-Threat.net en 2026-10-28T00:11:33+00:00 Magento PolyShell CVE-2026-48356: KEV and webshell hunt