Cybersecurity

CISA added CVE-2026-97229, an integer overflow affecting GitLab CE and EE, to its Known Exploited Vulnerabilities catalog. Key details remain limited.

• Security Zone Info Team
• October 29, 2026

Dream Security says attackers chained PHP2Shell with a Linux kernel flaw to root 25 PAN-OS servers, including systems in a US government-affiliated environment.

• Security Zone Info Team
• October 29, 2026

A community report says macOS developer tools still trust compromised eMudhra certificates after a recent update, exposing HTTPS connections to interception.

• Security Zone Info Team
• October 29, 2026

CVE-2026-97631 affects EDK2-based UEFI network boot code. A public fix appeared before coordinated disclosure, complicating vendor patching.

• Security Zone Info Team
• October 28, 2026

DreamHost says affected account owners have been emailed reset instructions. Its File Manager remains unavailable as work continues.

• Security Zone Info Team
• October 26, 2026

A critical Brotli decoder flaw affects multiple runtimes and HTTP products. Patches are available for several projects, but coverage remains incomplete.

• Security Zone Info Team
• October 25, 2026

Search and coverage interest in “Vulnerability [XKCD]” is rising, but the available source does not confirm a specific security flaw or trigger.

• Security Zone Info Team
• October 24, 2026

Amanda Smith says a fraudster opened a Cash App account in her name. She was arrested in Pennsylvania over a $1,000 Arkansas case.

• Security Zone Info Team
• October 23, 2026

A Tor operator says testing identified 333 compromised exit relays used to redirect SSH traffic; operators and the Tor Project disabled them in October.

• Security Zone Info Team
• October 21, 2026

KrebsOnSecurity reports that investigators suspect an unnamed U.S. consulting executive helped operate ShinyHunters’ extortion website.

• Security Zone Info Team
• October 21, 2026