Popcorn Time’s abandoned update mechanism creates critical vulnerability enabling remote code execution. Millions of installations remain vulnerable with no patches possible. Security teams must identify and remove all instances to eliminate this persistent threat.
BlackX UEFI bootkit exploits Baton Drop vulnerability to bypass Secure Boot and disable Kaspersky and Avast security software. This firmware-level espionage tool operates below the OS, surviving reinstallations and evading traditional detection methods.
CISA has added CVE-2026-110447, a critical 9.2 CVSS vulnerability in Collabora Online’s Built-in CODE Server, to its Known Exploited Vulnerabilities catalog due to active exploitation. Organizations must immediately patch affected instances and review logs for compromise indicators.
Apache Tomcat patched eight vulnerabilities including authentication bypass and cross-user data exposure flaws across versions 11.0.27, 10.1.61, and 9.0.123. Security teams must immediately update affected instances and monitor for exploitation attempts.
TeamUpdraft breach exposed UpdraftCentral connection keys, granting threat actors administrative access to managed WordPress sites. Organizations using the platform must immediately rotate all keys and audit for unauthorized activity in this supply-chain compromise.
F5 Networks released emergency patches for critical NGINX vulnerabilities rated CVSS 9.0+, enabling remote code execution without authentication. Security teams must immediately update NGINX deployments to versions 1.25.5, 1.24.2, or NGINX Plus R32 to prevent exploitation.
A 16-year-old Broadcom Wi-Fi vulnerability enables unauthenticated remote code execution on routers from within wireless range. The flaw affects millions of devices across major manufacturers since 2010. Organizations must inventory Broadcom equipment and apply patches immediately.
BAE Systems cyber incident disabled the Bankruptcy Noticing Center for seven days starting October 9, preventing all US federal bankruptcy courts from sending required legal notices. The outage demonstrates critical vulnerabilities in third-party government services.
Attackers compromised ConnectWise Cloud Backup credentials to access 173 Microsoft 365 tenants, exploiting broad OAuth permissions. The breach demonstrates critical risks of vendor credential compromise in multitenant SaaS environments and the need for enhanced monitoring.
BeyondTrust patched a critical zero-day in Remote Support actively exploited since August 2024. Organizations using BeyondTrust RS face four months of potential unauthorized privileged access. Immediate patching and retrospective security analysis required.
