Weekly digest · week 44
26 October to 1 November 2026
17 Major stories, 6 flaws added to CISA's exploited list and 0 breached listed companies. Busiest country: United States.
This week isn't over yet: the digest fills in every time the collector runs, and the comparisons with the week before appear once it ends.
- Major stories
- 17Major stories
- Medium stories
- 98Medium stories
- stories about flaws on CISA's list
- 8stories about flaws on CISA's list
- flaws added to CISA's list
- 6flaws added to CISA's list
- countries named in incidents
- 15countries named in incidents
- breached listed companies
- 0breached listed companies
The biggest stories
Major. CISA says it's being exploited
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
Major. CISA says it's being exploited
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Major. Reported as actively exploited
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
Major. CISA says it's being exploited
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
Major. CISA says it's being exploited
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
Major. CISA says it's being exploited
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
Major. CISA says it's being exploited
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
Major. CISA says it's being exploited
PHP2Shell security flaws now sucessfully exploited in the wild
New on CISA's exploited list
Broadcom VMWare ESX Insufficient Logging Vulnerability
Linux Kernel Missing Initialization of a Variable Vulnerability
Google Brotli Unchecked Return Value Vulnerability
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
PHP Memory Corruption Vulnerability
PHP Stale Internal Request-State Vulnerability
Where it happened
- United States: 10 stories
- China: 4 stories
- Japan: 4 stories
- South Korea: 2 stories
- Ukraine: 2 stories
Markets
No breach story named a listed company this week.
Coming up
No events listed for the week after. Submit one.