CyberPulse Cybersecurity News, with Source Links
FA
SOCRadar

Ivanti Connect Secure Zero-Day Chain Enables Root Access

A previously unknown threat actor tracked as UTA0576 chained three Ivanti Connect Secure zero-day vulnerabilities to run code as root on VPN appliances without logging in. The attacks began in early October 2026 and hit at least one appliance that was fully patched at the time. Ivanti says exploitation has affected a limited number of […]

Vulnerabilities & Zero-Day Threat Intelligence
Read the full article at SOCRadar Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Industrial Cyber

NIST sets post-quantum cryptography migration priorities, with 2030 deadlines for high-value federal systems

The U.S. National Institute of Standards and Technology (NIST) rolled out a finalized report to help organizations transition... The post NIST sets post-quantum cryptography migration priorities, with 2030 deadlines for high-value federal systems appeared first on Industrial Cyber.

Malware & Threats Vulnerabilities & Zero-Day Phishing
Source
CSO Online

A compromised DevOps laptop caused the $6.3B Binance breach

Cryptocurrency Exchange Binance blamed a compromised DevOps laptop for the loss of $6.3 billion in cryptocurrency last week, adding that it will now cover any losses faced by its customers. “Binance will cover all losses from the Secure Assets Fund for Users (SAFU) and the company’s funds,” the world’s largest cryptocurrency exchange said in an update on Friday, adding that user funds are safe and that it had found n…

Vulnerabilities & Zero-Day Data Breach Cloud Security
Source
Trail of Bits

Backporting security fixes at scale with Codex

Stable Linux releases lack existing security fixes because backporting them is time-consuming and often thankless work. We’re using Codex to reduce the backporting process time from days to hours per fix, empowering human patch reviewers to rapidly submit fixes for critical software like Ubuntu Long Term Support, Fedora, and the Linux kernel. By October 29, our project helped deliver fixes for 149 distinct CVEs into…

Vulnerabilities & Zero-Day Networking & Internet Operating Systems
Source
CSO Online

Cursor removes malicious Claude Code extension after SSH backdoor attempt

A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ machines, potentially giving attackers remote access to systems holding source code, credentials and other sensitive information. “Between about 2:27am PT and 1:35pm PT today, a maliciously modified version of Anthropic’s Claude Code extension…

Malware & Threats Supply Chain Security Threat Intelligence
Source