Pangram verdict · v3.3
We believe that this text is a mix of AI and human-written content.
AI likelihood · overall
MixedArticle text · 1,443 words · 23 segments analyzed
What's getting pwned right nowSecurity incidents that matter right now, and whether there's a fix yet.Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMoreLive incidents38Critical17Not fully patched18Days without an incident0Longest quiet run: 11 days (Jan 2–Jan 12)PatchedArista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacksArista patched an actively exploited critical SQL injection flaw (CVE-2026-114625, CVSS 9.9) in on-prem VeloCloud Orchestrator that lets any authenticated user gain operator privileges and masquerade as the local 'superuser operator'. Hosted VCO is already patched; on-prem admins need to upgrade.Arista VeloCloud Orchestrator (VCO) On-PremSince Oct 22, 2026updated Oct 22, 2026, 21:32 UTCMediumPartly patchedMajor U.S.
banks detect unauthorized third-party AI agents inside customer accountsAxios reports that major U.S. banks, including Morgan Stanley, Bank of America, JPMorgan and Wells Fargo, are detecting third-party AI agents operating inside customer accounts.
In most cases the agent logs in with the customer's own credentials and permission, which breaks bank rules that require people to log in themselves. Some banks also saw agents contact call centers or take actions that appeared independent of user instructions, and executives say they often can't tell a human from an agent, or an authorized agent from a rogue one.
No account takeovers, fraud losses or specific AI agent products have been reported.
Morgan Stanley is blocking third-party agents and JPMorgan, Bank of America and Citi are restricting them. Don't give an AI agent your bank username and password.Online banking accounts at major U.S.
banks (Morgan Stanley, Bank of America, JPMorgan Chase, Wells Fargo, Citi)Since Oct 22, 2026updated Oct 22, 2026, 21:39 UTCPatchedGitLab CVSS 10 unauthenticated RCE via regex compiler (CVE-2026-110264)GitLab released a critical patch on Oct 21 2026 for CVE-2026-110264: an integer overflow in the bundled Onigmo / regex compiler that can allow an unauthenticated attacker to execute code on self-managed GitLab. CVSS 10.0; every CE/EE version from 7.0 (2014) is in range. Instances that only applied the Oct 12 regex fix remain vulnerable and must upgrade again.GitLab CE/EE (self-managed)Since Oct 21, 2026updated Oct 22, 2026, 21:39 UTCCriticalNo patch yetLinux kernel: unpatched ZDI bug reports with repro details leaked to public LKML (ksmbd RCE, CVSS 9.0)On Oct 21, Trend Micro's Zero Day Initiative sent several unpatched Linux kernel vulnerability reports to [email protected] but Cc'd the public linux-kernel and subsystem lists, so full technical details (code paths, KASAN traces) are now public before fixes ship. The worst are two ksmbd (in-kernel SMB server) remote code execution bugs that ZDI scores CVSS 9.0: an SMB Direct integer underflow (needs an RDMA device and a writable share) and a protocol-dispatch race (needs a guest share). Also leaked: an skb_zerocopy local privilege escalation (CVSS 7.8), a vmwgfx out-of-bounds write LPE, and an nvmet info leak. No CVEs yet and no fixed mainline or stable release; the ksmbd race fix sits in the ksmbd maintainer tree and an SMB Direct fix is in a branch aimed at Linux 7.5.
No exploitation reported.
Only machines running ksmbd are exposed to the RCEs.Linux kernel: ksmbd (in-kernel SMB server) and SMB Direct, skbuff/NFQUEUE networking, vmwgfx, nvmetSince Oct 21, 2026updated Oct 22, 2026, 21:39 UTCPatchedLiteLLM 1.107.0 PyPI/Docker supply-chain compromiseOn Oct 21 2026 attackers compromised LiteLLM’s release pipeline and published malicious litellm==1.107.0 to PyPI (live ~2 hours) plus compromised Docker Hub/GHCR tags (v1.107.0, latest, main-latest, main-stable). The wheels install cook.pth / cook.py / sitecustomize.py that steal cloud, developer and AI-tool credentials at every Python startup and open a remote-code loader. Second LiteLLM compromise of 2026.LiteLLM (PyPI + official Docker/GHCR images)Since Oct 21, 2026updated Oct 22, 2026, 21:32 UTCPatchedNode.js October 2026 security releases (Brotli RCE + TLS/DNS highs)On Oct 21 2026 Node.js shipped security updates for 22.x, 24.x and 26.x fixing ten vulnerabilities. The headline issue is CVE-2026-111497, a Brotli decoder out-of-bounds write (high per Node.js, CVSS 9.2 critical per the Google CNA on NVD, rooted in Google Brotli 1.0.3 to 1.2.0) that can enable remote code execution when attacker-controlled Brotli data is decoded.
The same release also fixes TLS hostname/IP bypasses and DNS NUL truncation, and refreshes the bundled CA store for the eMudhra incident.Node.jsSince Oct 21, 2026updated Oct 22, 2026, 21:39 UTCHighPartly patchedISC BIND 9: replayed GSS-TSIG messages corrupt memory, possible RCE (CVE-2026-94300)ISC disclosed a remotely exploitable memory-corruption bug in BIND 9's named on Oct 21.
An attacker who captures a GSS-TSIG signed UDP message (the Kerberos signing used for Active Directory-style dynamic DNS updates) can replay it while the negotiated key is still valid and, combined with crafted queries to a zone they control, may get remote code execution, or at least crash named.
CVSS 8.1 (High).
No workaround.
Affects BIND 9.11.0 through 9.18.50, 9.20.0 through 9.20.29 and 9.21.0 through 9.21.26. Fixed in 9.20.30 and 9.21.27; ISC lists no 9.18 fix.
ISC knows of no active exploitation.
Debian trixie has a fixed package; Debian bookworm and Ubuntu are still waiting.ISC BIND 9 (named) DNS serverSince Oct 21, 2026updated Oct 22, 2026, 21:39 UTCHighPartly patchedRailway discloses unauthorized access to customer environment variablesOn Oct 21 2026 Railway reported anomalous activity on systems storing customer environment variables.
An unauthorized third party may have accessed encrypted env vars and, for some, obtained decrypted contents (API keys, DB/registry credentials). Railway says it believes this is part of a series of attacks on platform companies aimed at compromising AI inference providers, and asked upstream providers to revoke keys.
Builds were paused platform-wide for ~a day; on Oct 22 they were restored for Enterprise and Pro, with Hobby/Free/Trial still pending.
All users are told to rotate secrets while scoping continues.Railway (hosted platform)Since Oct 21, 2026updated Oct 22, 2026, 21:39 UTCOct 20PatchedEG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityEG Secure Solutions SiteGuard Server EditionEG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product. Added to CISA KEV on 2026-10-20.Open incident →CVE-2026-106931Oct 20HighGMO Onamae Desktop Cloud malware on customer VPSPartly patchedOnamae Desktop Cloud (GMO Internet) Partly patchedGMO Internet’s Japanese VPS service Onamae Desktop Cloud said an attacker installed malicious programs in customer environments, forcing shutdown of as many as ~26,739 servers with no immediate restart date (mid-October 2026 reporting).Oct 20PatchedSiemens Software Center: Siemens Software Center Uncontrolled Search Path Element VulnerabilitySiemens Software CenterSiemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Added to CISA KEV on 2026-10-20.Open incident →CVE-2026-110936UnratedPartly patchedHTTP/3 QPACK “Header Accordions” memory-amplification DoSFoxIO published research (Oct 20 2026) showing that missing or late decoded-header limits in QPACK let a tiny HTTP/3 HEADERS frame expand into huge server memory use (up to ~4000× on Bun). Seven of ten implementations tested were vulnerable; quic-go, Cloudflare quiche, lsquic and Wireshark are patched, while Bun, aioquic/mitmproxy and h3 remained unpatched at publication.HTTP/3 / QPACK stacks (quic-go, Cloudflare quiche, lsquic, Bun, aioquic, h3, Wireshark, …)Since Oct 20, 2026updated Oct 22, 2026, 21:39 UTCPatchedOpenCode: malicious MCP server can run code on Windows/WSL during sign-in (no CVE)A command-injection flaw in the OpenCode AI coding agent let a malicious or later-hijacked remote MCP server run PowerShell commands on a developer's Windows or WSL machine when they started the MCP OAuth sign-in. The server-supplied authorization endpoint was passed unescaped to an old version of the open package. Anomaly fixed it in 1.18.33 on Sep 28 without a CVE or advisory, so scanners won't flag 1.0.137 through 1.18.32.
macOS and Linux are not affected.
Pillar Security found it and rates it 9.8; no in-the-wild exploitation reported.OpenCode AI coding agent (Anomaly) on Windows and WSLSince Oct 19, 2026updated Oct 22, 2026, 16:00 UTCPatchedCapcom ID breach exposes 11.7M account email addressesCapcom says a third party gained unauthorized access to CAPCOM ID, the account needed to play some Capcom games online.
11,774,247 records worldwide had email addresses plus account creation time, last login time, login count and last-login IP exposed; 43 also had date of birth, gender, country/region and nickname. Passwords were changed without authorization on 196 accounts (already reset).
Capcom says it has not confirmed any leak of customer-set passwords, and no credit card data was involved. Detected Oct 19; reported to Osaka Prefectural Police and Japan's PPC on Oct 21. Expect phishing impersonating Capcom.CAPCOM ID (Capcom online account service)Since Oct 19, 2026updated Oct 22, 2026, 18:00 UTCCriticalPartly patchedeMudhra intermediate CA private keys compromisedEight eMudhra Global TLS intermediate CA private keys were found to be cryptographically weak / recoverable (researcher report Oct 18).