| 1 | CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure
Original article | Confirmed 100
Actively exploited | 31 Oct 2026 |
| 2 | A Vulnerability in Brotli Library Could Allow for Remote Code Execution
Original article | Confirmed 100
Vulnerability | 30 Oct 2026 |
| 3 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Original article | Confirmed 100
Vulnerability | 28 Oct 2026 |
| 4 | CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools
Original article | Confirmed 100
Vulnerability | 28 Oct 2026 |
| 5 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Original article | Confirmed 100
Vulnerability | 28 Oct 2026 |
| 6 | CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas
Original article | Confirmed 100
Vulnerability | 28 Oct 2026 |
| 7 | Upwind raises $400M after walking away from Datadog acquisition offer
Original article | Reported 70
Other | 28 Oct 2026 |
| 8 | Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
Original article | Reported 70
Actively exploited | 28 Oct 2026 |
| 9 | Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
Original article | Reported 70
Vulnerability | 28 Oct 2026 |
| 10 | Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
Original article | Reported 70
Other | 28 Oct 2026 |
| 11 | Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
Original article | Reported 70
Breach / leak | 28 Oct 2026 |
| 12 | Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Original article | Reported 70
Actively exploited | 28 Oct 2026 |
| 13 | GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
Original article | Reported 70
Threat actor | 28 Oct 2026 |
| 14 | The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
Original article | Reported 70
Vulnerability | 28 Oct 2026 |
| 15 | Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Original article | Reported 70
Ransomware | 28 Oct 2026 |
| 16 | South Korea’s financial industry hit by fresh wave of cyberattacks
Original article | Reported 70
Other | 28 Oct 2026 |
| 17 | AI Takes Root in Hospital Corridors, Raises Security Stakes
Original article | Reported 70
Other | 28 Oct 2026 |
| 18 | Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
Original article | Reported 70
Breach / leak | 28 Oct 2026 |
| 19 | Cisco open sources tool for detecting AI agents on hacking sprees
Original article | Reported 70
Vulnerability | 28 Oct 2026 |
| 20 | 123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
Original article | Reported 70
Breach / leak | 28 Oct 2026 |
| 21 | ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History
Original article | Reported 70
Other | 28 Oct 2026 |
| 22 | Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
Original article | Reported 70
Policy / law | 28 Oct 2026 |
| 23 | Unwrapping Retail Peak Season Cyber Threats
Original article | Reported 60
Ransomware | 28 Oct 2026 |
| 24 | The CISO’s evolving role: Protecting and defending in the agentic era
Original article | Reported 60
Other | 28 Oct 2026 |
| 25 | Banks are blocking AI agents from customer accounts
Original article | Reported 60
Other | 28 Oct 2026 |