CriticalExploited in the wild
Alpine Linux's GitLab was probed with CVE-2026-97229; upgrading GitLab alone did not fix it
Fix Patched in 19.4.2 / 19.3.5 / 19.2.8
The Week · Oct 26 to Nov 1
Agent-written code is now outrunning the infrastructure and the budgets behind it.
123 stories across 7 briefings. The headline is from Thu, the busiest day.
Day by day
All weeks →Deadlines that week · 6
All deadlines →7days ago
Fri Oct 30
Meta's revised commercial terms take effect
Re-read the live terms; check robots.txt and staging logins
In the digest6days ago
Sat Oct 31
OpenAI Evals goes read-only (Evals platform, Agent Builder and v1/prompts shut down Nov 30)
Export evals before Oct 31
OpenAI ↗6days ago
Sat Oct 31
Mistral retires zai-glm-5-2 (changelog Oct 22)
Move to zai-glm-5-3, same price
Mistral ↗6days ago
Sat Oct 31
DeepSeek free Search/Fetch tool promotion ends 4:00 PM UTC
Budget $0.75 per 1K calls after
DeepSeek ↗5days ago
Sun Nov 1
CISA KEV federal patch deadline for GitLab CVE-2026-97229 (CVSS 10.0 RCE)
Upgrade GitLab and Ruby/Onigmo; rebuild any instance that was probed
The Hacker News ↗5days ago
Sun Nov 1
CISA KEV federal patch deadline for Cisco ASA/FTD CVE-2026-76418 (exploited reload DoS)
Apply the Cisco fixed release
The Hacker News ↗Security · 29
All security →CriticalExploited in the wild
Cisco SD-WAN CVE-2026-20127 now carries KeyDrift, a controller implant that reads decrypted control traffic
Fix Patched in February 2026
CriticalExploited in the wild
Drupal Commerce Core authorization bypass is exploited, CVE-2026-118539 (Oct 30)
Fix Patched in 3.3.13 / 8.x-2.41
CriticalExploited in the wild
Binance loses about $6.3 billion via a DevOps laptop; Polymarket drained through a monitoring vendor (Oct 29-30)
Fix No patch
HighExploited in the wild
Northflank breach lets attackers spend customers' AI API keys (Oct 31)
Fix No patch; rotate secrets
HighExploited in the wild
Ivanti Connect Secure CVE-2026-111357 and CVE-2026-118527 join an exploited root chain
Fix Patched in 25.1.1.3 and 22.8R2.6
HighExploited in the wild
ARTEX at scale: CrowdStrike counts 200-plus targets for Vapor Panda, and Chainalysis reports an agentic intrusion
Fix No patch; this is attacker tradecraft
HighExploited in the wild
Official Claude Code extension trojaned on the Cursor Marketplace (Oct 30)
Fix Fixed in 2.1.314
Show 21 moreHide
HighExploited in the wild
Cisco ASA and FTD flaw CVE-2026-76418 is exploited to crash SSL VPN devices
Fix Fixed in ASA 9.16.4.104 through 9.24.1.27 and FTD 7.0.11 through 10.1.1
HighExploited in the wild
Warp discloses a vendor breach exposing AI agent logs and telemetry for about 1% of users
Fix No patch; vendor exposure remediated
HighExploited in the wild
Gheist uses stolen GitHub tokens to print private repository secrets into Actions logs
Fix Fix: revoke tokens, rotate secrets
MediumExploited in the wild
Hugging Face cryptominer campaign returns, 31 repos and 32,000 downloads (Oct 29)
Fix No patch; avoid trust_remote_code
MediumExploited in the wild
A planted AGENTS.md in ~/Downloads tried to make a coding agent install malware
Fix Fix: none
LowExploited in the wild
CISA lists VMware ESXi CVE-2026-41709, a "low severity" logging bug used as a zero-day
Fix Fixed in ESXi 9.1.0.0-25370933, 9.0.2.0100-25595025, 80U3j-25429389 and newer
CriticalExploitation unknown
Anthropic's unreleased model chained flaws into working exploits for Chrome, Safari, Windows and Linux, including Linux root bug CVE-2026-98432
Fix Patched in RHEL 8.10 / 9.8 / 10.2 kernels; Ubuntu 22.04, 24.04 and 26.04 in -proposed only
CriticalNot exploited
LXD and MicroCloud accept an impersonated trusted client, CVE-2026-112816 (Nov 1)
Fix Fixed in LXD 6.10.1 / 5.21.9 / 5.0.11 / 4.0.15, MicroCloud 3.4.1 / 2.1.5, Incus 7.6.0
Critical
Attackers probe Oracle E-Business Suite SQL injection CVE-2026-101767 a week after patch
Fix Patched in the October CPU
HighNot exploited
TeamViewer CVE-2026-111585: a malicious host can crash or run code on the technician's viewer
Fix Patched in 15.83
HighExploitation unknown
A shared ChatGPT link could run attacker code in the viewer's signed-in session
Fix Fixed server-side Oct 26
HighNot exploited
Built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop all broke a browser rule (Oct 29)
Fix Cursor and Copilot fixed; Codex and VS Code unpatched as of Oct 29
HighExploitation unknown
vLLM advisories: forged shared-memory handles reach pickle.loads(), and EPS uploads can reach Ghostscript
Fix Fixed in vLLM 0.32.0 (shared-memory flaw); fix version for the EPS flaw not stated
HighExploitation unknown
26,400 working cloud and AI credentials found in public Gitee repositories
Fix Fix: revoke and rotate keys
HighNot exploited
Cathedral's AI agents reached Anthropic's sales, HR and IT systems through third-party business software
Fix Remediation status not disclosed
HighExploitation unknown
MCP TypeScript SDK GHSA-f897-62hf-6gxq: HTTP transports had no body-size or batch limit
Fix Patched in the SDK release named in the advisory
HighNot exploited
Cloudflare discloses a Workers AI bug that returned other customers' prompt text from GLM-5.3
Fix Fixed Sep 9
HighNot exploited
Microsoft Authenticator for Android let a no-permission app collect work-account tokens, CVE-2026-80097
Fix Patched in 6.2606.4246
HighExploitation unknown
Tailworm: unpatched Tailscale SSH flaws let one hacked device reach root on other servers
Fix Fix: none yet
MediumExploitation unknown
Android "SMS of Death" CVE-2026-58882 now has a public proof of concept (Oct 31)
Fix Patched in Android 14 through 17 via the October 2026 update
MediumNot exploited
Xint used OpenAI's compaction feature to copy a model's hidden reasoning out as plain text
Fix Fixed by OpenAI Oct 23