 |
Took me long enough, but I’ve finally uploaded my DEF CON 33 talk to Youtube for those who were unable to make it in person. submitted by /u/OSINTDojo |
Source: Reddit r/OSINT · 2026-10-30
Day: October 30, 2026
-
DEF CON 33 Talk: Pretty Good Privacy, Examining The PGP Key Pair Creation Habits of Dark Net Vendors
-
Notice of Order Regarding Exclusion and Removal of Acronis Products From Federal Civilian Executive Branch Information Technology Systems and Procurements
The Department of Homeland Security is publishing notice of the Secretary of Homeland Security’s issuance of an order excluding Acronis AG and all affiliated entities, as well as any covered articles directly or indirectly supplied by them (Acronis covered articles) from federal civilian agency procurements; and, removing all Acronis covered articles from civilian agency information technology systems.
- Agencies: Homeland Security Department
- Document type: Notice
- Document number: 2026-22215
Source: Federal Register — Cybersecurity · 2026-10-30
-
CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.
- Vendor / product: Ivanti Connect Secure
- Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset’s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Federal due date: 2026-11-02
- Known ransomware campaign use: Unknown
- CWE: CWE-306, CWE-862, CWE-345
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US ; https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111357
Source: CISA Known Exploited Vulnerabilities · 2026-10-30
-
CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
- Vendor / product: Ivanti Connect Secure
- Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset’s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Federal due date: 2026-11-13
- Known ransomware campaign use: Unknown
- CWE: CWE-340
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-118527
Source: CISA Known Exploited Vulnerabilities · 2026-10-30
-
Malicious Claude Code extension distributed through Cursor marketplace
Categories: Threat Research
Tags: advisory, Cursor
Source: Sophos X-Ops Threat Research · 2026-10-30
-
Часть услуг НКСС могут быть недоступны из-за кибератаки
La Caisse Nationale d’Assurance Sociale (CNAS) a signalé des perturbations temporaires de ses services électroniques suite à une cyberattaque sur ses systèmes d’information. L’institution conseille aux utilisateurs de faire preuve de vigilance, de ne pas fournir de données personnelles par téléphone ou message, et de n’utiliser que le site web officiel (www.cnas.gov.md).
- Victim: Caisse Nationale d’Assurance Sociale (CNAS)
- Country: MD
- Domain: cnas.gov.md
Source: ransomware.live — Cyberattacks in the News · 2026-10-30