2026-10-06T19:49:37Z https://nostr.now ssvc https://nostr.now/npub1wfmch5l920u6ds7c5uq9ey99q9h2pmmmtpg2fkz8nqtd30auw3ds225hsj https://media.infosec.exchange/infosec.exchange/accounts/avatars/117/202/824/925/377/048/original/55486117c73a9fea.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/117/202/824/925/377/048/original/55486117c73a9fea.png https://nostr.now/nevent1qqsdw4k9jyjhd6jyvcrtstfrh83me7wkymqaav4z6np8epf4krex6wczype80z7nu4flnfkrmznsqhys55qkag800dv9pfxcg7vpdk9lh369k3e2qsz updated again placeholder: <a href="https://www.cisa.gov/news-events/alerts/2026/10/29/cisa-adds-two-known-exploited-vulnerabilities-catalog">https://www.cisa.gov/news-events/alerts/2026/10/29/cisa-adds-two-known-exploited-vulnerabilities-catalog</a><br/><br/>#CISA #KEV 2026-10-29T15:08:01Z https://nostr.now/nevent1qqsx3z25x7gx9yhjzp48663v2fl0uvunk55tqvm0hqh6u58sjuz22cszype80z7nu4flnfkrmznsqhys55qkag800dv9pfxcg7vpdk9lh369kd3xh4u On October 20 and 21, an attacker tried to exploit CVE-2026-97229 against Alpine Linux&#39;s GitLab instance. <br/><br/>We have found no evidence that it succeeded, but we cannot rule it out, so we treated the instance as compromised and rebuilt it from scratch. Our checks show that the aports repository, packages, and the October 21 releases were not tampered with.<br/><br/><a href="https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html">https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html</a><br/><br/>#GitLab #CVE #eitw 2026-10-29T13:31:49Z https://nostr.now/nevent1qqsyy32a48yhef9v7mvpt9255mm805c9c8cymqvu8xg27csmdqmuq7szype80z7nu4flnfkrmznsqhys55qkag800dv9pfxcg7vpdk9lh369kwx4z0p lol. lmao even.<br/><br/><a href="https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities">https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities</a><br/><br/>#Linux #ZDI #CVE 2026-10-22T13:56:40Z https://nostr.now/nevent1qqsvffv5xkj76v6gd6rzn6sgwl2rnap3e0ynkyrysawhtzp2nulsc2gzype80z7nu4flnfkrmznsqhys55qkag800dv9pfxcg7vpdk9lh369kdhv9m2 Get ready for PHP security updates tomorrow to address CVE-2026-109618 and CVE-2026-109619 (the leaked RCE CVEs with CVSSv4 9.2 scores)<br/><br/><a href="https://www.php.net/archive/2026.php#2026-10-20-1">https://www.php.net/archive/2026.php#2026-10-20-1</a><br/><a href="https://cert.europa.eu/publications/security-advisories/2026-018/">https://cert.europa.eu/publications/security-advisories/2026-018/</a><br/><br/>#PHP #CVE 2026-10-20T20:46:46Z https://nostr.now/nevent1qqsyecmpcde9ecggljypf2zux7p46ndcmgjvq5srdt266dflln5k02gzype80z7nu4flnfkrmznsqhys55qkag800dv9pfxcg7vpdk9lh369kny3jwf Plex2Shell chain exploited in the wild for cryptomining against Plex media servers: <a href="https://www.boredhackerblog.info/2026/10/plex-vulnerabilities-being-exploited-in.html">https://www.boredhackerblog.info/2026/10/plex-vulnerabilities-being-exploited-in.html</a><br/><br/>CVE-2026-96652 (5.3 med) Plex Media Server SSRF<br/>CVE-2026-96654 (6.9 med) Plex Media Server URL injection<br/>CVE-2026-96655 (5.3 med) Plex Media Server arbitrary-host SSRF<br/>CVE-2026-96656 (8.6 high) Plex Media Server arbitrary file write<br/><br/>#threatintel #plex #IOC #eitw 2026-10-19T13:22:57Z https://nostr.now/nevent1qqs9w3exjav5hf22v3wch0qawma69flehlpzdyhh88msj7dlu4ppmjgzype80z7nu4flnfkrmznsqhys55qkag800dv9pfxcg7vpdk9lh369kt9y4pq new SonicWall SMA1000 advisory. Check out CVE-2026-102255 (10.0 critical) Pre-authentication SSRF via unintended forward-proxy. No mention of exploitation, but it&#39;s not a good look that your Secure Mobile Access is not secure (including four known exploited vulnerabilities in the past 90 days)<br/><br/><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017">https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017</a><br/><br/>#sonicwall #sma1000 #cve 2026-10-06T19:40:03Z https://nostr.now/nevent1qqsxa2cdmuu3mnmp0ekslgnkrqggqm6qmjuj2zvds2qcsmrqlu2hn3qzype80z7nu4flnfkrmznsqhys55qkag800dv9pfxcg7vpdk9lh369k4309em Our weekly Citrix NetScaler zero-day CVE-2026-88779. See you next Sunday I guess<br/><br/><a href="https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174&amp;articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88779">https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174&amp;articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88779</a><br/><br/><a href="https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/">https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/</a><br/><br/>#citrix #netscaler #zeroday #eitw 2026-10-04T23:53:23Z