Comparing 26 October 2026 with the previous day 19 October 2026.
The report shows that Russian GRU espionage also targets NATO-adjacent industry and law enforcement, underscoring supply-chain risk for European manufacturing.
The vulnerability requires user interaction and is therefore classically suited for targeted phishing campaigns using crafted PDF documents against end users.
The flaw requires user interaction but affects a standard tool for handling external documents and thus a classic entry point for targeted attacks.
This is a pure ZDI advisory with no indication of active exploitation; exploitation requires a user to open a crafted DCM file.
ZDI documents an RCE vulnerability in Adobe Photoshop that requires user interaction; there is no indication of active exploitation.
The flaw lies in parsing DICOM/JPEG-LS image data, extending the attack surface of a graphics workflow to file formats that are rarely opened outside medical and technical imaging.
The post demonstrates a new Windows privilege-escalation technique via dangling COM registrations and provides a working exploit for an incomplete patch.
The flaw requires user interaction and has no known in-the-wild exploitation at present; it is primarily addressed by promptly patching Reader DC and Acrobat.
The report highlights that the .NET Brotli vulnerability requires emergency patches but provides no indication of active exploitation or nation-state actors.
The campaign shows that stolen session tokens bypass MFA and remain valid even after a password change , token revocation and Conditional Access therefore matter more than password hygiene alone.
The advisory summarizes multiple vulnerabilities in Adobe Acrobat and Reader without providing new exploitation details or CVE references.
This report reveals an active social engineering campaign via Microsoft Teams where attackers impersonate IT support to spread malware and ransomware , a direct attack vector for organizations using Teams.
The advisory provides concrete TTPs and IOCs for SafePay ransomware and documents active double-extortion attacks that go beyond generic patch information.
The report highlights that manipulated AD Group Policy Objects serve as a scalable distribution mechanism for ransomware, making domain control itself an attack surface.
The volume of 1,413 CVEs with three zero-days shows that plain patch cycles without prioritised risk assessment and fast emergency paths for critical systems are no longer sufficient.
OpenSSH is a critical component for remote administration; multiple vulnerabilities require timely patching even though no active exploitation is known.
The report is an updated BSI aggregate advisory without CVE IDs or exploit status and therefore provides no reliable basis for a prioritized patching decision.
The advisory provides no CVE IDs, CVSS scores, or affected versions, which makes prioritising the UnifiOS vulnerabilities difficult.
The alert provides no CVE or exploitation details; it merely confirms a privilege escalation in Edge that should be fixed via update.
Without CVE IDs, CVSS scores, or details on active exploitation, the concrete priority of the Edge vulnerabilities cannot be determined.
No changes in this category.
No changes in this category.
CISA confirms active exploitation of both vulnerabilities and adds them to the KEV catalog , patching is therefore not preventive but acutely urgent.
The advisory bundles multiple vulnerabilities across several SIMATIC S7 product lines, pointing to a broad patching window in OT environments where updates can only be applied during maintenance windows.
The report shows that a legitimate signed Siemens application is being abused as a DLL sideloading host for an active ClickFix malware campaign, a risk that goes beyond classic patch information.
The report shows that state-sponsored actors use Fortinet edge devices not only for initial access but to establish a persistent, hard-to-detect implant platform inside the target network.
The attack requires local access, so the risk is mainly relevant for already compromised or multi-stage attacked environments with FortiGate and FortiProxy appliances.
The advisory summarizes multiple browser vulnerabilities without CVE IDs, severity ratings or exploitation evidence, thus offering little concrete prioritization guidance.
The BSI update confirms the ongoing relevance of local privilege escalation in the Linux kernel without providing new details on exploitation.