Threat Wire
BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys

CyberWatch Newsroom Live Intel

Continuous enterprise threat intelligence tracking active in-the-wild zero-days (CISA KEV), Microsoft Windows KB cumulative updates, MSRC security advisories, and CVE remediation.

Last Checked: Nov 2, 2026 - 02:28:59 UTC (Hourly Auto-Sync Active)
Newsfeed (/feed) RSS Feed JSON API
All Security Bulletins 5,807 Active Zero-Days (KEV) 608 Microsoft Patch KBs 849 MSRC Live Wire 1,922 CISA Advisories 157 Threat Intel 2,629
Showing 24 of 82 advisories
Page 1 of 4
YARA-X 1.22.1 Release, (Sat, Oct 31st) Moderate SANS Internet Storm Center
2026-10-31 SANS Internet Storm Center

YARA-X 1.22.1 Release, (Sat, Oct 31st)

YARA-X's 1.22.1 is a bugfix version, it brings 2 bugfixes.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Operational Threat Radar
Advisory
YARA-X 1.22.0 Release, (Sun, Oct 25th) Moderate SANS Internet Storm Center
2026-10-31 SANS Internet Storm Center

YARA-X 1.22.0 Release, (Sun, Oct 25th)

YARA-X's 1.22.0 release brings 11 improvements and 9 bugfixes.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Operational Threat Radar
Advisory
Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th) Important SANS Internet Storm Center
2026-10-29 SANS Internet Storm Center

Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)

Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it's convenient to play with snapshots in your lab. Start a new investigation from a clean snapshot and take some more when you reached a critical step. But, if you need to revert to a previous snapshot, all changes applied to the VM are... lost! T…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Operational Threat Radar
Advisory
Apple Patches for October 2026, (Mon, Oct 26th) Moderate SANS Internet Storm Center
2026-10-26 SANS Internet Storm Center

Apple Patches for October 2026, (Mon, Oct 26th)

Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Operational Threat Radar
Advisory
(Reliable)? php2shell exploitability, (Fri, Oct 23rd) Important SANS Internet Storm Center
2026-10-23 SANS Internet Storm Center

(Reliable)? php2shell exploitability, (Fri, Oct 23rd)

Yesterday everyone was running around like crazy (me included :) because of the php2shell vulnerability.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Operational Threat Radar
Advisory
PHP Vulnerability Wrap-Up, (Fri, Oct 23rd) Important SANS Internet Storm Center
2026-10-23 SANS Internet Storm Center

PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)

This morning, we returned to Infocon Green. As usual, we are raising the Infocon to alert you to emerging situations requiring immediate attention. PHP fit that description. By now, you either know about it, or you probably never will, so it is time to go back to "business as usual".

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Operational Threat Radar
Advisory
Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st) Critical CVE-2026-109618 SANS Internet Storm Center
2026-10-21 SANS Internet Storm Center

Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)

PHP.net announced that it will release a critical update today. We decided to change the infoCon to YELLOW due to the widespread use of PHP, the expected severity of the flaw (CVSS 9.4), and the availability of early PoC exploits before the patch became available.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Operational Threat Radar
Advisory
1 2 3 4
Notification