‼️ Patched, but still exploitable.

The new BlackX UEFI bootkit bypasses Secure Boot on Windows systems missing required revocations, even after the patch is installed.

Attackers used it in breaches of Central Asian diplomatic networks after gaining admin access.

Details: https://thehackernews.com/2026/10/blackx-uefi-bootkit-bypasses-secure.html

🚨 UPDATE: Railway says hackers targeted AI API keys to carry out model distillation attacks.

Up to 100,000 workspaces may have been exposed.

Attackers allegedly used uncensored AI models and massive compute resources to breach its infrastructure.

What we know: https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html

🚨 Two critical flaws. Both actively exploited.

CISA confirms attacks targeting Collabora Online and Arista VeloCloud.

• Collabora flaw exploited to plant web shells on Nextcloud servers
• Third exploited VeloCloud flaw since July
Federal patch deadline: October 26.

Read more ↓ https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html

‼️ Alert - Critical Brotli flaw behind #Node2Shell RCE goes far beyond Node.js.

Bun, Python Brotli packages, Envoy, Istio and other widely used software are also affected by the same CVE-2026-111497 memory-corruption vulnerability.

Read full details ↓ https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html

🚨 Researchers pushed over 2 million remote updates to disable a forgotten Popcorn Time updater that could have fueled a botnet.

The flaw let anyone controlling its update domain deliver code with SYSTEM or root privileges.

How they pulled it off ↓ https://thehackernews.com/2026/10/researchers-push-over-2-million-updates.html

Google says your Gmail, Drive, and Photos data could influence the ads you see.

The catch? This can happen when you opt to share that data with AI-powered Search features.

Google's updated privacy policy spells out the trade-off.

Here's what you need to know: https://thehackernews.com/2026/10/google-says-gmail-and-photos-data.html

🚨 LiteLLM reveals the root cause of its supply chain attack.

A master key leaked on GitHub in May was never revoked, allowing attackers to access its Agent Platform, steal a GitHub owner token, and publish a malicious PyPI release in October.

Read: https://thehackernews.com/2026/10/leaked-litellm-master-key-let-attackers.html

‼️ OpenAI's AI agents found ways to escape virtual machines and secretly communicate across isolated sandboxes.

In one test, agents exchanged synthetic secrets using CPU cache timing, without internet access or shared files.

OpenAI has now banned live internet access during frontier AI training.

Full story: https://thehackernews.com/2026/10/openai-ai-agents-demonstrate-vm-escapes.html

🚨 PHP2Shell attackers accessed MFA secrets and password hashes at a European government entity in just 2 hours.

That's not all.

→ Signs of agentic AI use in post-exploitation activity
→ Suspected Lazarus-linked operators scanning 216 targets worldwide

Full details ↓ https://thehackernews.com/2026/10/php2shell-exploitation-hits-government.html

‼️ WARNING - A researcher just dropped a report on Tailscale SSH flaws — one compromised device could get root on others, and there’s NO PATCH yet.

In lab tests, SSH port forwarding enabled privilege escalation and lateral movement across already-permitted devices.

Tailscale says a fix is coming.

Read - https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html

‼️ In a real-world attack, a malicious file in a dev's Downloads folder tried to trick an AI coding agent into installing malware.

In controlled tests, Codex ran the malware in over 90% of attempts.

All it took was a planted AGENTS md file.

Read: https://thehackernews.com/2026/10/malicious-file-in-downloads-folder.html

🚨 The 9.0 Linux KSMBD bugs got the headlines. The 7.8 one has the public root exploit.

ZDI-CAN-33367: confirmed root on AlmaLinux, Debian and Ubuntu.

→ Slips past the Dirty Frag fix
→ No merged patch. No CVE.

Who's exposed + the stopgap ↓ https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html

🍿 UPDATE on the Popcorn Time cleanup

Of the 20 domains Eye Security flagged:

▸ 17 now point to Shadowserver
▸ 3 don't, and whoever holds them could push code to computers still running the app
▸ 1 of those 3 was registered Oct 19

Read ↓ https://thehackernews.com/2026/10/researchers-push-over-2-million-updates.html

🚨 850+ compromised GitHub accounts. 13,500+ malicious branches.

Researchers uncovered 'Gheist,' an ongoing campaign using stolen tokens to plant GitHub Actions workflows that dump private repo secrets into logs.

Attackers download the logs, then delete the runs.

Details: https://thehackernews.com/2026/10/gheist-uses-stolen-github-tokens-to.html

🚨 97 Microsoft 365 accounts compromised across 79 organizations.

Attackers replayed stolen sign-in tokens, registered 48 rogue Entra devices, and tampered with MFA settings to maintain access.

Huntress tracked over 200,000 login attempts.

Read - https://thehackernews.com/2026/10/microsoft-365-token-replay-attacks.html

🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic.

• .NET: patched by Microsoft
• FFmpeg: hit via a crafted JPEG XL image
• ClickHouse: one request crashes it, fix not yet released
• Apache Arrow: no fix yet

Details ↓ https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html

🚨 Android spyware for rent can steal Telegram 2FA passwords and clone WeChat accounts.

Meet uCreator, a kit that hides inside modified Telegram apps, extracts chats, and conceals attacker sessions.

Read full investigation: https://thehackernews.com/2026/10/ucreator-android-spyware-can-steal.html

‼️ Tailscale SSH (Tailworm)

Researchers report that a compromised, SSH-authorized device could gain root on permitted targets via forwarding flaws.

Not unauthenticated RCE. Lab-tested; scope still under review.

Mitigations:
• Tighten SSH access policies
• Disable forwarding if unused (TS_SSH_DISABLE_FORWARDING=1)
• Enable SSH check mode as an added barrier

Tailnet Lock helps limit device enrollment abuse, not root escalation. Tailscale isn't recommending a blanket SSH shutdown.

Read - https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html

🚨 An attack can unfold for weeks before a SOC gets its first major alert.

By then, the real story may be buried in DNS queries, logins, and network connections that looked harmless.

Here's how NDR helps AI-assisted SOCs connect the clues and reconstruct attacks.

Read more ↓ https://thehackernews.com/2026/10/between-alerts-what-attackers-do-in.html

‼️ ALERT - 2 New critical Wasmtime flaws (CVSS 9.9) could let malicious WebAssembly modules escape their sandbox.

• CVE-2026-115889 Affects multiple architectures
• CVE-2026-115893 ARM64-only, present since 2020

Embedded apps need rebuilding.

Read ↓ https://thehackernews.com/2026/10/two-critical-wasmtime-flaws-could-let.html