What has changed?

ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability

The flaw sits in the AdobePDFL PDF/JPEG parsing component and requires user interaction, making email attachments and web downloads the primary attack vector.

ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability

The ZDI advisory details CVE-2026-95636, an RCE flaw in Photoshop's DCM pixel processing that can be exploited via crafted image files requiring user interaction.

U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance

The disruption of a DPRK IT-worker operation highlights the risk of North Korean sham employment in Western supply chains, even without classic malware.

CVE-2026-110927

The report names no active exploitation, attacker, or affected sectors; it describes only a technical memory-exhaustion DoS flaw in OpenSSH compression handling.

October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)

Besides the already actively exploited Mark-of-the-Web bypass in Windows Shell, the Exchange and DHCP remote code execution flaws and the high number of Office vulnerabilities are the most practically relevant points of this Patch Tuesday.

Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

The campaign shows that monetized bandwidth theft via compromised network devices, not just classic malware, is an active risk.

[UPDATE] Linux Kernel: Multiple vulnerabilities allow unspecified attack