JEDI-SEC | Security Research & Digital Defense

Day: October 29, 2026

Cross-Media Electronic Reporting: Announcement of Determination To Approve Authorized Program Revisions
This notice announces the Environmental Protection Agency’s (EPA) approval of requests to revise/modify EPA-authorized programs to allow electronic reporting from Arkansas Energy and Environment (E&E), Arizona Department of Environmental Quality (AZDEQ), Connecticut Department of Energy and Environmental Protection (CT DEEP), Delaware Department of Technology & Information–Department of Natural Resources and Environmental Control (DTI-DNREC), Iowa Department of Natural Resources (IDNR), Idaho Department of Environmental Quality (IDEQ), Indiana Department of Environmental Management (IDEM), Kentucky Department of Water (DOW), Louisville Metro Air Pollution Control District (LMAPCD), Maryland Department of Environment (MDE), Mecklenburg County Air Quality, Mississippi Department of Environmental Quality (MDEQ), Montana Department of Environmental Quality (DEQ), North Carolina Department of Environmental Quality (NCDEQ), Nebraska Department of Environment and Energy (NDEE), Nevada Division of Environmental Protection (NDEP), Oregon Department of Environmental Quality (DEQ), Tennessee Department of Environmental Conservation (TNDEC), and Wyoming Department of Environmental Quality (DEQ).
- Agencies: Environmental Protection Agency
- Document type: Notice
- Document number: 2026-22066
Source: Federal Register — Cybersecurity · 2026-10-29
Documents
- 2026-22066.pdf
October 29, 2026
Privacy Act of 1974; System of Records
Pursuant to the provisions of the Privacy Act of 1974, as amended, notice is hereby given that the Farm Credit Administration (FCA or Agency) is amending an existing system of records, FCA-5– Assignments and Communication Tracking System–FCA. The Assignments and Communication Tracking System–FCA system is used to track draft correspondence and other memoranda, employee assignments, and notes from oral and written correspondence and communications between FCA and FCSIC staff and external parties. This information is used for reference and aids Agency management in its deliberations. The Agency is updating the notice to reflect changes to the system name, the categories of individuals, the records maintained in the system, the record source categories, the system purpose, and the Policies and Practices for Storage of Records’ and the Administrative, Technical, and Physical Safeguards’ sections. Additionally, a modification to a routine use for the system has been made.
- Agencies: Farm Credit Administration
- Document type: Notice
- Document number: 2026-22075
Source: Federal Register — Cybersecurity · 2026-10-29
Documents
- 2026-22075.pdf
October 29, 2026
CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
- Vendor / product: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software
- Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset’s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Federal due date: 2026-11-01
- Known ransomware campaign use: Unknown
- CWE: CWE-690
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76418

Source: CISA Known Exploited Vulnerabilities · 2026-10-29
October 29, 2026
CVE-2026-97229: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.
- Vendor / product: GitLab Community Edition and Enterprise Edition
- Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset’s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Federal due date: 2026-11-01
- Known ransomware campaign use: Unknown
- CWE: CWE-190
Other products can potentially be affected by the same underlying Ruby/Onigmo Integer Overflow issue in CI/CD Regular Expression Compiler. For more information please see: https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves ; https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-97229

Source: CISA Known Exploited Vulnerabilities · 2026-10-29
October 29, 2026
AI used in Aur0ra ransomware testing and execution

The GOLD OGRE threat group has used AI extensively to develop tools and to orchestrate and execute ransomware operations

Categories: Threat Research

Tags: AI, Ransomware, Aur0ra

Source: Sophos X-Ops Threat Research · 2026-10-29

October 29, 2026