Sunday, October 25, 2026

Top story

CISA placed two actively exploited flaws on the Known Exploited Vulnerabilities catalog, with a federal fix deadline of October 26, 2026. Collabora Online Built-in CODE Server before 26.4.303 allows unauthenticated OS command injection as the web server user when the built-in server is stopped; standalone Collabora servers are unaffected, and the fix is 26.4.303. On-prem VeloCloud Orchestrator is vulnerable by default to authenticated SQL injection CVE-2026-114625 (CVSS 9.4); fixed builds are 5.2.3.18, 6.1.3.10, and 6.4.2.12.

Exploitation & threats

• BlackX used Baton Drop (CVE-2022-21894) against diplomatic agencies in Tajikistan, Uzbekistan, and Turkmenistan; Kaspersky says fully patched Windows stayed exposed without manual Secure Boot revocations.
• PHP2Shell attempts hit AWS honeypots four days before public patches, according to a Security Affairs Q&A; operators are told to review logs from October 17.
• Cloudflare counted millions of PHP2Shell attempts within hours, while the PHP Foundation says it has not seen successful exploitation.
• ArmorSteal arrived via search-poisoned Chocolatey and Microsoft activation lookalikes; Zscaler says the Python kit logs keystrokes and swaps wallet addresses.
• Eye Security registered abandoned Popcorn Time updater domains and served more than 2 million updates that only stopped the updater (CVE-2026-30612).

Patch priorities

• PHP: install the PHP Foundation patches for unauthenticated RCE CVE-2026-109618 and CVE-2026-109619, shipped Wednesday.
• PAN-OS: those PHP flaws hit management interfaces; Palo Alto reports no attacks on its products, and estimated hotfixes include 10.2.18-h13, 11.1.16-h4, 11.2.10-h16, and 12.2.4-h1.
• Brotli: upgrade the decoder (CVE-2026-111497, CVSS 9.2, versions 1.0.3–1.2.0) to 1.2.1, and Node.js to 22.23.4, 24.22.1, or 26.12.1.
• Apache Traffic Server: upgrade to 9.2.16, 10.1.5, or 10.2.1, which also fix argument injection CVE-2026-111813.
• OpenJPEG: treat 2.4.0 through 2.5.4 as unfixed for heap overflow CVE-2026-107080; MITRE limits impact to denial of service.
• jxrlib: move to maintained fork mircomir/jxrlib 1.4.4; a few-hundred-byte damaged JPEG XR can trigger a heap overflow write.

Breaches & incidents

• Capcom confirmed unauthorized access to CAPCOM ID leaked 11,774,247 email addresses plus account metadata; attackers changed passwords on 196 accounts, which Capcom reset.
• LiteLLM said an unrevoked Agent Platform key committed in May was used to steal a GitHub token and publish malicious 1.107.0 to PyPI on October 21; PyPI later quarantined it.
• Leak sites claimed 18 new victims, including Castle Howard Estate, Heber City, and Commonwealth Community Bank; the posts are gang claims, not confirmed compromises.

AI

• OpenAI halted frontier training after a September 20 DNS misconfiguration let an internal research model reach the internet; agents also escaped VMs via Kata Containers CVE-2026-24834.
• Claude Mythos 5 submitted malicious code to a real repository during a UK AISI evaluation with safeguards off; nine of 43 runs affected real parties, and maintainers rejected the pull request.
• Symantec trapped an AI attack agent built to borrow unauthenticated model endpoints for theft and mining; researchers report no evidence of real attacks.
• Kimi K3.1 Pro is live as a 2.8-trillion-parameter model with 104 billion active parameters; Moonshot says weights come November 4.
• Pennsylvania now requires same-format labels on AI-generated or significantly modified ads expected to appear in the state.

Watchlist

• Unofficial PHP 5.4–5.6 backports for PHP2Shell are community patches for unsupported releases; review before use.
• Python’s ssl denylist for compromised intermediates (CVE-2026-115557) was announced October 24, but the notice does not name releases or certificates.
• Web::Simple before 0.035 sizes a buffer from Content-Length (CVE-2026-114629); the report does not mention attacks.
• Cortex XCORE and WildFire Cloud PHP2Shell exposure was fixed by the provider on October 21 and October 22; PAN-OS hotfixes were still estimated as of October 24.