ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)
Source: SANS Internet Storm Center · 2026-10-28
Day: October 28, 2026
-
Exemptions To Permit Circumvention of Access Controls on Copyrighted Works
The United States Copyright Office is conducting the tenth triennial rulemaking proceeding under the Digital Millennium Copyright Act (“DMCA”), concerning temporary exemptions to the DMCA’s prohibition against circumvention of technological measures that control access to copyrighted works. Having carefully considered the petitions for new and renewal exemptions and comments received in response to the June 9, 2026 Notification of Inquiry, the Office announces the Register’s intention to recommend all but one of the existing exemptions for renewal, and initiates three rounds of public comment on newly proposed exemptions. Comments submitted may not exceed twenty-five pages per class, excluding documentary evidence.
- Agencies: Library of Congress, Copyright Office, Library of Congress
- Document type: Proposed Rule
- Document number: 2026-21939
Source: Federal Register — Cybersecurity · 2026-10-28
-
Certain Polyvinylidene Fluoride Resins, Notice of a Commission Determination To Review in Part a Final Initial Determination Finding a Violation of Section 337; Request for Written Submissions on the Issues Under Review and on Remedy, the Public Inte
Notice is hereby given that the U.S. International Trade Commission (“Commission”) has determined to review in part a final initial determination (“FID”) of the presiding administrative law judge (“ALJ”). The Commission requests written submissions from the parties on the issues under review and submissions from the parties, interested government agencies, and other interested persons on the issues of remedy, the public interest, and bonding, under the schedule set forth below.
- Agencies: International Trade Commission
- Document type: Notice
- Document number: 2026-21942
Source: Federal Register — Cybersecurity · 2026-10-28
-
NCUA Draft 2027-2028 Budget
NCUA’s draft “detailed business-type budget” is being made available for public review as required by federal statute. The proposed resources will finance the agency’s annual operations and capital projects, both of which are necessary for the agency to accomplish its mission of enabling access to financial services by facilitating safe, sound, and resilient credit unions. Comment instructions are included in the SUPPLEMENTARY INFORMATION section.
- Agencies: National Credit Union Administration
- Document type: Notice
- Document number: 2026-21948
Source: Federal Register — Cybersecurity · 2026-10-28
-
Adjusting Imports of Wind Turbines and Their Parts and Components Into the United States
- Agencies: Executive Office of the President
- Document type: Presidential Document
- Document number: 2026-22049
Source: Federal Register — Cybersecurity · 2026-10-28
-
CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability
Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root.
- Vendor / product: Linux Kernel
- Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset’s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Federal due date: 2026-10-31
- Known ransomware campaign use: Unknown
- CWE: CWE-456
This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300
Source: CISA Known Exploited Vulnerabilities · 2026-10-28
-
CVE-2026-41709: Broadcom VMWare ESX Insufficient Logging Vulnerability
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.
- Vendor / product: Broadcom VMware ESX
- Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset’s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Federal due date: 2026-11-11
- Known ransomware campaign use: Unknown
- CWE: CWE-778
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709
Source: CISA Known Exploited Vulnerabilities · 2026-10-28
-
Node2Shell (CVE-2026-111497) in active exploitation
Categories: Threat Research
Tags: advisory, vulnerability, Node2Shell, Brotli
Source: Sophos X-Ops Threat Research · 2026-10-28
-
Nach Hackerangriff: Uni Leipzig weiter offline
L’Université de Leipzig a été victime d’une cyberattaque. Les serveurs connectés à Internet ont été mis hors ligne le mercredi pour prévenir tout dommage. L’attaque a affecté le site web et le système de messagerie, empêchant les étudiants et le personnel de communiquer. Les autorités mènent des analyses pour déterminer la nature de l’attaque, la méthode d’intrusion et si des données ont été exfiltrées.
- Victim: Université de Leipzig
- Country: DE
- Domain: uni-leipzig.de
Source: ransomware.live — Cyberattacks in the News · 2026-10-28