Beat
Bugs, patches and what to deploy first.
10 stories
A China-linked espionage campaign used a new UEFI bootkit, BlackX, against diplomatic organizations in Central Asia by re-abusing CVE-2022-21894 where Secure Boot certificate revocations were never enforced.
CISA has added two critical, actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: a command injection flaw in Collabora's built-in CODE…
A high-severity out-of-bounds write in the Brotli decoder bundled with Node.js has been shown to allow remote code execution on stock Node.js…
GitLab shipped emergency fixes on October 21 for an integer overflow in its CI/CD regular expression compiler that enables unauthenticated remote code…
CVE-2026-109618 and CVE-2026-109619, both rated 9.2, allow unauthenticated command execution through a single HTTP request against servers running PHP-FPM or Apache mod_php.…
Plex warns that any internet-facing Plex Media Server below build 1.43.3.10861 should be treated as at risk, as attackers chain four vulnerabilities…
CVE-2026-110936 (CVSS 8.4) lets attackers pair a signed Siemens binary with malicious DLLs. A fix in version 4.0.9.8 rolls out automatically; CISA…
CISA has listed the PAN-OS GlobalProtect authentication bypass in its Known Exploited Vulnerabilities catalog, and Unit 42 says an unidentified threat actor…
The PwnEscape flaw (CVE-2026-99999, CVSS 9.3) lets crafted guest packets corrupt host kernel memory via the IPv4 checksum path. Patched host kernels…
The great pwnescape vuln
