已发布刊物 · 免费预览
Ariquo Security News Stream — 2026-11-02
发布： 摘要更新：
31 daily news events from 35 source observations.
本期内容预览
1. Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
Overview On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357 , a missing authentication for critical function vulnerability ( CWE-306 ), with a CVSSv3.1 score of 8.8 ; it allows a local authenticated attacker to escalate privileges.
2. CyberStrikeAI attacks educational institutions | Securelist
CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations As part of proactive threat monitoring, Kaspersky’s Cyber Threat Intelligence team identified a malicious campaign involving C2 agents controlled by artificial intelligence. Confirmed victims of the campaign included organizations in the education sector in several countries across Africa and Latin America.
3. Backporting security fixes at scale with Codex
Stable Linux releases lack existing security fixes because backporting them is time-consuming and often thankless work. We’re using Codex to reduce the backporting process time from days to hours per fix, empowering human patch reviewers to rapidly submit fixes for critical software like Ubuntu Long Term Support, Fedora, and the Linux kernel.
4. We are currently tracking over 1000 GitLab instances vulnerable to CVE-2026-97229 (on @CISACyber KEV) and over 11300 instances vulnerable to CVE-2026-110264 (out of around 39K GitL
We are currently tracking over 1000 GitLab instances vulnerable to CVE-2026-97229 (on @CISACyber KEV) and over 11300 instances vulnerable to CVE-2026-110264 (out of around 39K GitLab instances we see daily). Tree Map Dashboard stats (both vulns) dashboard.shadowserver.org/statistics/com…
5. A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects the...
A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects the...
6. A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the...
A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the...
7. The System REST APIs do not correctly enforce access control mechanisms, allowing users with...
The System REST APIs do not correctly enforce access control mechanisms, allowing users with... The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute administrative actions that should be restricted.
8. A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function...
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function...
9. A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the...
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the...
10. A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the...
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the...
11. A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue...
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue...
12. A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects...
A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects...
13. Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain controller.
14. Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Cybersecurity researchers have disclosed details of a cyber espionage campaign specifically targeting Linux infrastructure associated with government entities and state-affiliated infrastructure. The activity, observed by Palo Alto Networks Unit 42 between October 2025 and April 2026, has been tracked under the moniker , where "CL" refers to cluster and "UNK" stands for unknown motivation.
15. Synology warns of C3RB3R ransomware attacks targeting NAS devices
Synology warns of C3RB3R ransomware attacks targeting NAS devices Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. The company urged users to enable automatic updates and upgrade the DiskStation Manager (DSM) software running on their NAS devices to the latest version to protect their data.
16. New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their monetization value. Like other typical stealer families, VOLTA is equipped to harvest passwords and cookies from Chromium-based web browsers; data from Outlook profiles and Slack workspaces; payment cards; cryptocurrency wallet seed phrases; Discord, Telegram, Steam, and Roblox sessions; Microsoft OAuth tokens; SSH and cloud-provider keys; Wi-Fi profiles; and screenshots.
17. Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are...
Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are... Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option.
18. Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601...
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601... Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.
19. The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to...
The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to... The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements.
20. A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function...
A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function...
21. A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown...
A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown...
已展示本期 31 条中的 21 条。注册并开通相应订阅后，可在阅读页查看完整刊物。