Attackers are using a BeyondTrust Remote Support zero-day and the Atlassian Data Center file-read flaw. Also: Office Preview Pane flaws, AI coding tokens stolen, Drupal, Next.js and NGINX fixes, hijacked NAS boxes, spyware in ads, and AI agents on leaked credentials. Every version number and every fix in this episode was checked against the vendor's own advisory before it aired. Today's question: Where do your developers' AI tool tokens live, and how long do they last? Reply in the comments or at feedback@defensivesecurity.org.

1. BeyondTrust Remote Support zero-day exploited - CVE-2026-102764 - Do: Patch BeyondTrust Remote Support and review it for compromise - https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/

2. Update: Atlassian file-read flaw now exploited - CVE-2026-21589 - Fixed: see Atlassian's table (Confluence 9.2.26 / 10.2.19, Jira 9.12.40 / 10.3.26 / 11.3.12, Bitbucket 9.4.26 / 10.2.8 / 10.5.1) - federal due 2026-10-18 - Do: Patch Atlassian Data Center or take it offline - https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html

3. Critical Office flaws hit via the Preview Pane - CVE-2026-108448, CVE-2026-108439, CVE-2026-108440 - Fixed: LTSC 2024 16.0.17932.21056, LTSC 2021 16.0.14334.20974, Mac 16.114.26101123 - Do: Make sure Tuesday's Office update actually installed - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108448

4. Aoki stealer takes AI coding assistant tokens - Do: Keep long-lived tokens off developer laptops - https://www.infosecurity-magazine.com/news/aoki-infostealer-ai-coding/

5. Drupal critical flaw; 28% on end-of-life branches - CVE-2026-108097 - Fixed: 11.4.10, 11.3.19 or 10.6.19 - Do: Update Drupal core, or uninstall Field UI - https://www.drupal.org/sa-core-2026-014

6. Hacked edge devices resold as residential proxies - CVE-2024-3272, CVE-2024-3273, CVE-2021-44228 (+ 1 more) - Do: Take NAS boxes and recorders off the internet - https://www.greynoise.io/blog/proxyjacking-edge-devices-residential-proxies

7. Next.js out-of-band fix for two critical RCEs - CVE-2026-96889 - Fixed: 16.4.1 or 15.5.28 - Do: Upgrade Next.js - https://github.com/vercel/next.js/security/advisories/GHSA-2464-fhr4-w9xw

8. Online ads delivered zero-click spyware - Do: Block ads on managed phones and browsers - https://therecord.media/spyware-citizen-lab-advertising

9. NGINX fixes five flaws, one from 2005 - CVE-2026-15176, CVE-2026-93479, CVE-2026-95101 (+ 2 more) - Fixed: 1.30.6 or 1.31.7 - Do: Upgrade NGINX - https://nginx.org/en/security_advisories.html

10. Test AI agents got in on leaked credentials - Do: Find and rotate credentials sitting in your code - https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html

Attackers are getting root on Cisco Secure Email Gateways with a crafted attachment, and the fix is a month old. Also: a PAN-OS zero-day, Ahsay's failed patch, Nextcloud, Zimbra, curl, Claude Code Desktop, and which package managers check their downloads. Every version number and every fix in this episode was checked against the vendor, the CVE record or the researcher who found it before it aired. Today's question: Have you ever turned on a package manager's integrity checks on purpose, and what made you do it? Reply in the comments or at feedback@defensivesecurity.org.

1. Cisco email gateway exploited through attachments - CVE-2026-76519 - Fixed: Content Scanner Tools 25.3.0.5525; AsyncOS 15.5.5-014 or 16.5.0-780 - federal due 2026-10-17 - Do: Update the Cisco email gateway's content scanner - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp

2. PAN-OS management interface zero-day exploited - CVE-2026-0322 - Fixed: 12.2.4, 12.1.4-h12, 12.1.7-h8, 12.1.10-h2, 11.2.16, 11.1.16-h3, 10.2.18-h12 - federal due 2026-10-17 - Do: Patch PAN-OS and lock down management access - https://security.paloaltonetworks.com/CVE-2026-0322

3. Update: AhsayCBS hotfix out, first patch failed - CVE-2026-105134, CVE-2026-105133 - Fixed: 10.3.4.45 (v10); 9.15.2.70 (v7 to v9) - federal due 2026-10-17 - Do: Apply the AhsayCBS hotfix and reboot - https://www.huntress.com/blog/ahsaycbs-flaws-exploit

4. Nextcloud's built-in Collabora app exploited - CVE-2026-110447 - Fixed: 26.4.303 - Do: Update or remove Nextcloud's built-in Collabora app - https://cveawg.mitre.org/api/cve/CVE-2026-110447

5. Linux vhost flaw: local root, and a VM escape - CVE-2026-74580 - Fixed: 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9 - Do: Update and reboot your Linux hosts - https://cloud.tencent.com/announce/detail/2483

6. Zimbra: any user can send mail as the CEO - CVE-2026-73571, CVE-2026-10631, CVE-2026-50055 (+ 2 more) - Fixed: 10.1.17 (CVE-2026-73571); 10.1.20 (CVE-2026-10631, CVE-2026-50055) - Do: Upgrade Zimbra - https://www.rapid7.com/blog/post/ve-breaking-zimbra-identity-boundaries-part-1

7. curl fixes its first High flaw since 2023 - CVE-2026-92392 - Fixed: 8.23.0 - Do: Update curl - https://curl.se/docs/CVE-2026-92392.html

8. Claude Code Desktop's preview pane read SSH keys - Fixed: 1.30096.1 - Do: Get long-lived secrets off developer laptops - https://noma.security/noma-labs/sneakpeek-how-the-preview-pane-in-claude-code-desktop-can-exfiltrate-your-data

9. AI built a Chrome exploit in six days - CVE-2026-85045 - Fixed: 152.0.7977.82 - Do: Force Chrome relaunches after updates - https://xbow.com/blog/xbow-built-a-chrome-full-chain-exploit

10. Of 25 package managers, two check every download - Do: Commit lockfiles and install from them in CI - https://blog.trailofbits.com/2026/10/14/package-managers-have-an-integrity-problem/

Attackers chained Ivanti Connect Secure zero-days to take over VPNs without a login, one of them fully patched, and Microsoft's record October updates fix a Windows flaw that skips the warning on downloaded files. Also: Fortinet, Chrome, Copilot in Visual Studio, SAP, npm trusted publishing, Ghostscript, and a Docker Hub flaw that handed old tokens to new owners. Every version number and every fix in this episode was checked against the vendor's advisory or the CVE record before it aired. Today's question: Which remote-access path into your network would you least like to explain to an auditor? Reply in the comments or at feedback@defensivesecurity.org.

1. Ivanti VPN zero-days give root before login - CVE-2026-104935 - Fixed: 22.8R2.5, or 25.1.3.0 or later - federal due 2026-10-16 - Do: Upgrade Ivanti and rotate its directory account - https://www.cve.org/CVERecord?id=CVE-2026-104935

2. Exploited Windows flaw leads record Patch Tuesday - CVE-2026-96951, CVE-2026-70571, CVE-2026-70229 - federal due 2026-10-16 - Do: Push October's Windows updates - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951

3. FortiSandbox and FortiSIEM fix pre-login flaws - CVE-2026-107656, CVE-2026-106173 - Fixed: FortiSandbox 5.0.7 or 4.4.10; FortiSIEM 7.5.1 - Do: Upgrade FortiSandbox and FortiSIEM - https://fortiguard.fortinet.com/psirt/FG-IR-26-185

4. Chrome update fixes seven critical flaws - CVE-2026-110152, CVE-2026-110149, CVE-2026-110136 - Fixed: 155.0.8059.79/.80; Extended Stable 152.0.7977.167 - Do: Update Chrome and force the restart - http://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html

5. Copilot in Visual Studio could run commands - CVE-2026-103572 - Fixed: 17.14.42 or 18.10.4 - Do: Update Visual Studio and SSMS - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572

6. SAP fixes four critical flaws in October - CVE-2026-89111, CVE-2026-89110 - Fixed: sap-cloud-sdk 0.45.2 - Do: Apply SAP's October security notes - https://www.cve.org/CVERecord?id=CVE-2026-89111

7. Vendor-run gateway let an attacker into a bank - Do: Require MFA on vendor-managed remote access - https://unit42.paloaltonetworks.com/noise-inside-network-third-party-risk/

8. npm trusted publishing trusted repository names - Do: Review your npm packages' trusted publisher settings - https://github.blog/changelog/2026-10-02-unvalidated-npm-trusted-publishing-configurations-now-expire

9. Ghostscript flaw reachable through uploaded PDFs - CVE-2026-39919 - Fixed: 10.08.0 - Do: Update Ghostscript on servers that process uploads - https://www.cve.org/CVERecord?id=CVE-2026-39919

10. Docker Hub handed old tokens to new owners - CVE-2026-105445 - Do: Revoke Docker Hub tokens you don't recognize - https://docker.com/blog/docker-hub-security-advisory-cve-2026-105445