Attackers are using a BeyondTrust Remote Support zero-day and the Atlassian Data Center file-read flaw. Also: Office Preview Pane flaws, AI coding tokens stolen, Drupal, Next.js and NGINX fixes, hijacked NAS boxes, spyware in ads, and AI agents on leaked credentials. Every version number and every fix in this episode was checked against the vendor's own advisory before it aired. Today's question: Where do your developers' AI tool tokens live, and how long do they last? Reply in the comments or at feedback@defensivesecurity.org.

1. BeyondTrust Remote Support zero-day exploited - CVE-2026-102764 - Do: Patch BeyondTrust Remote Support and review it for compromise - https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/

2. Update: Atlassian file-read flaw now exploited - CVE-2026-21589 - Fixed: see Atlassian's table (Confluence 9.2.26 / 10.2.19, Jira 9.12.40 / 10.3.26 / 11.3.12, Bitbucket 9.4.26 / 10.2.8 / 10.5.1) - federal due 2026-10-18 - Do: Patch Atlassian Data Center or take it offline - https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html

3. Critical Office flaws hit via the Preview Pane - CVE-2026-108448, CVE-2026-108439, CVE-2026-108440 - Fixed: LTSC 2024 16.0.17932.21056, LTSC 2021 16.0.14334.20974, Mac 16.114.26101123 - Do: Make sure Tuesday's Office update actually installed - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108448

4. Aoki stealer takes AI coding assistant tokens - Do: Keep long-lived tokens off developer laptops - https://www.infosecurity-magazine.com/news/aoki-infostealer-ai-coding/

5. Drupal critical flaw; 28% on end-of-life branches - CVE-2026-108097 - Fixed: 11.4.10, 11.3.19 or 10.6.19 - Do: Update Drupal core, or uninstall Field UI - https://www.drupal.org/sa-core-2026-014

6. Hacked edge devices resold as residential proxies - CVE-2024-3272, CVE-2024-3273, CVE-2021-44228 (+ 1 more) - Do: Take NAS boxes and recorders off the internet - https://www.greynoise.io/blog/proxyjacking-edge-devices-residential-proxies

7. Next.js out-of-band fix for two critical RCEs - CVE-2026-96889 - Fixed: 16.4.1 or 15.5.28 - Do: Upgrade Next.js - https://github.com/vercel/next.js/security/advisories/GHSA-2464-fhr4-w9xw

8. Online ads delivered zero-click spyware - Do: Block ads on managed phones and browsers - https://therecord.media/spyware-citizen-lab-advertising

9. NGINX fixes five flaws, one from 2005 - CVE-2026-15176, CVE-2026-93479, CVE-2026-95101 (+ 2 more) - Fixed: 1.30.6 or 1.31.7 - Do: Upgrade NGINX - https://nginx.org/en/security_advisories.html

10. Test AI agents got in on leaked credentials - Do: Find and rotate credentials sitting in your code - https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html

Attackers are getting root on Cisco Secure Email Gateways with a crafted attachment, and the fix is a month old. Also: a PAN-OS zero-day, Ahsay's failed patch, Nextcloud, Zimbra, curl, Claude Code Desktop, and which package managers check their downloads. Every version number and every fix in this episode was checked against the vendor, the CVE record or the researcher who found it before it aired. Today's question: Have you ever turned on a package manager's integrity checks on purpose, and what made you do it? Reply in the comments or at feedback@defensivesecurity.org.

1. Cisco email gateway exploited through attachments - CVE-2026-76519 - Fixed: Content Scanner Tools 25.3.0.5525; AsyncOS 15.5.5-014 or 16.5.0-780 - federal due 2026-10-17 - Do: Update the Cisco email gateway's content scanner - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp

2. PAN-OS management interface zero-day exploited - CVE-2026-0322 - Fixed: 12.2.4, 12.1.4-h12, 12.1.7-h8, 12.1.10-h2, 11.2.16, 11.1.16-h3, 10.2.18-h12 - federal due 2026-10-17 - Do: Patch PAN-OS and lock down management access - https://security.paloaltonetworks.com/CVE-2026-0322

3. Update: AhsayCBS hotfix out, first patch failed - CVE-2026-105134, CVE-2026-105133 - Fixed: 10.3.4.45 (v10); 9.15.2.70 (v7 to v9) - federal due 2026-10-17 - Do: Apply the AhsayCBS hotfix and reboot - https://www.huntress.com/blog/ahsaycbs-flaws-exploit

4. Nextcloud's built-in Collabora app exploited - CVE-2026-110447 - Fixed: 26.4.303 - Do: Update or remove Nextcloud's built-in Collabora app - https://cveawg.mitre.org/api/cve/CVE-2026-110447

5. Linux vhost flaw: local root, and a VM escape - CVE-2026-74580 - Fixed: 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9 - Do: Update and reboot your Linux hosts - https://cloud.tencent.com/announce/detail/2483

6. Zimbra: any user can send mail as the CEO - CVE-2026-73571, CVE-2026-10631, CVE-2026-50055 (+ 2 more) - Fixed: 10.1.17 (CVE-2026-73571); 10.1.20 (CVE-2026-10631, CVE-2026-50055) - Do: Upgrade Zimbra - https://www.rapid7.com/blog/post/ve-breaking-zimbra-identity-boundaries-part-1

7. curl fixes its first High flaw since 2023 - CVE-2026-92392 - Fixed: 8.23.0 - Do: Update curl - https://curl.se/docs/CVE-2026-92392.html

8. Claude Code Desktop's preview pane read SSH keys - Fixed: 1.30096.1 - Do: Get long-lived secrets off developer laptops - https://noma.security/noma-labs/sneakpeek-how-the-preview-pane-in-claude-code-desktop-can-exfiltrate-your-data

9. AI built a Chrome exploit in six days - CVE-2026-85045 - Fixed: 152.0.7977.82 - Do: Force Chrome relaunches after updates - https://xbow.com/blog/xbow-built-a-chrome-full-chain-exploit

10. Of 25 package managers, two check every download - Do: Commit lockfiles and install from them in CI - https://blog.trailofbits.com/2026/10/14/package-managers-have-an-integrity-problem/

Attackers chained Ivanti Connect Secure zero-days to take over VPNs without a login, one of them fully patched, and Microsoft's record October updates fix a Windows flaw that skips the warning on downloaded files. Also: Fortinet, Chrome, Copilot in Visual Studio, SAP, npm trusted publishing, Ghostscript, and a Docker Hub flaw that handed old tokens to new owners. Every version number and every fix in this episode was checked against the vendor's advisory or the CVE record before it aired. Today's question: Which remote-access path into your network would you least like to explain to an auditor? Reply in the comments or at feedback@defensivesecurity.org.

1. Ivanti VPN zero-days give root before login - CVE-2026-104935 - Fixed: 22.8R2.5, or 25.1.3.0 or later - federal due 2026-10-16 - Do: Upgrade Ivanti and rotate its directory account - https://www.cve.org/CVERecord?id=CVE-2026-104935

2. Exploited Windows flaw leads record Patch Tuesday - CVE-2026-96951, CVE-2026-70571, CVE-2026-70229 - federal due 2026-10-16 - Do: Push October's Windows updates - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951

3. FortiSandbox and FortiSIEM fix pre-login flaws - CVE-2026-107656, CVE-2026-106173 - Fixed: FortiSandbox 5.0.7 or 4.4.10; FortiSIEM 7.5.1 - Do: Upgrade FortiSandbox and FortiSIEM - https://fortiguard.fortinet.com/psirt/FG-IR-26-185

4. Chrome update fixes seven critical flaws - CVE-2026-110152, CVE-2026-110149, CVE-2026-110136 - Fixed: 155.0.8059.79/.80; Extended Stable 152.0.7977.167 - Do: Update Chrome and force the restart - http://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html

5. Copilot in Visual Studio could run commands - CVE-2026-103572 - Fixed: 17.14.42 or 18.10.4 - Do: Update Visual Studio and SSMS - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572

6. SAP fixes four critical flaws in October - CVE-2026-89111, CVE-2026-89110 - Fixed: sap-cloud-sdk 0.45.2 - Do: Apply SAP's October security notes - https://www.cve.org/CVERecord?id=CVE-2026-89111

7. Vendor-run gateway let an attacker into a bank - Do: Require MFA on vendor-managed remote access - https://unit42.paloaltonetworks.com/noise-inside-network-third-party-risk/

8. npm trusted publishing trusted repository names - Do: Review your npm packages' trusted publisher settings - https://github.blog/changelog/2026-10-02-unvalidated-npm-trusted-publishing-configurations-now-expire

9. Ghostscript flaw reachable through uploaded PDFs - CVE-2026-39919 - Fixed: 10.08.0 - Do: Update Ghostscript on servers that process uploads - https://www.cve.org/CVERecord?id=CVE-2026-39919

10. Docker Hub handed old tokens to new owners - CVE-2026-105445 - Do: Revoke Docker Hub tokens you don't recognize - https://docker.com/blog/docker-hub-security-advisory-cve-2026-105445

1. GitLab fixes a 10.0 pre-login code execution flaw — CVE-2026-97229 — Fixed: 19.4.2, 19.3.5 or 19.2.8 — Do: Upgrade self-managed GitLab — https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/

2. Windows 11 23H2 Enterprise updates end in November — Do: Find and upgrade Windows 11 23H2 machines — https://learn.microsoft.com/en-us/windows/release-health/windows-message-center

3. Attackers warmed freezers at French supermarkets — Do: Take vendor-managed equipment off the open internet — https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/

4. Free AI credits came with a rerouted coding agent — Do: Check where your coding agents send their traffic — https://www.elastic.co/security-labs/threat-command/apex-accelerator-malicious-npm-packages

5. Cheap Android phones ship as proxy exit nodes — Do: Keep unmanaged phones off the internal network — https://www.bitdefender.com/en-us/blog/labs/midnight-mimosa-malware

6. Agent frameworks ran a tool call the model refused — Do: Put the permission check in the tool — https://arxiv.org/html/2610.13651v1

7. VMware's MFA for ESX comes in a paid add-on — Do: Keep SSH off on your ESX hosts — https://www.theregister.com/virtualization/2026/10/13/vmware-is-pushing-so-many-patches-it-thinks-users-need-new-tools-to-manage-the-flood-1/5302172

1. GlobalProtect bypass still feeds ransomware — CVE-2026-0257 — Fixed: 12.1.7, 11.2.12, 11.1.15, 10.2.18-h6, or the matching hotfix — Do: Patch GlobalProtect and review VPN sessions — https://security.paloaltonetworks.com/CVE-2026-0257

2. Fake "security audit" workflow steals CI secrets — Do: Search your repos for unexpected workflow files — https://socket.dev/blog/ghostaction-cloud-credentials

3. Public root exploit for AnyDesk on Linux — Fixed: 8.0.3 — Do: Update AnyDesk on Linux hosts — https://github.com/v12-security/pocs/tree/main/anydesk

4. One prompt exposed every AgentCore agent — Do: Scope down every AgentCore execution role — https://labs.zenity.io/post/agentcorruption-how-a-single-prompt-collapsed-the-entire-cloud-security-model

5. Old Windows loses Windows Update in 2027 — Do: Find unsupported and stuck Windows machines — https://learn.microsoft.com/en-us/windows/release-health/windows-message-center

6. AWS PowerShell tools logged console passwords — CVE-2026-107783 — Fixed: 5.0.306 — Do: Upgrade AWS Tools for PowerShell — https://aws.amazon.com/security/security-bulletins/rss/2026-132-aws/

7. Exposed Nvidia GPU exporters leak telemetry — CVE-2026-47483 — Fixed: DCGM 4.5.3 — Do: Take the DCGM Exporter off the internet — https://github.com/NVIDIA/product-security/blob/main/2026/5857/5857.md

8. Two letters slip lookalike domains past Chrome — Do: Watch for lookalikes of your domains — https://www.theregister.com/security/2026/10/10/two-characters-open-up-a-world-of-typosquatting-opportunities-in-chromium-browsers/5302383

9. Update: Denmark's CPR breach ran on "123456" — Do: Ban common passwords on partner accounts — https://databreaches.net/2026/10/10/123456-password-used-in-massive-danish-cpr-data-breach/

1. AhsayCBS backup consoles exploited, no patch — CVE-2026-105134, CVE-2026-105133 — Do: Take the AhsayCBS console off the internet — https://www.huntress.com/blog/ahsaycbs-flaws-exploit

2. China-linked crew stays in through a VPN client — CVE-2014-6278, CVE-2015-3306, CVE-2015-5477 (+ 5 more) — federal due 2026-10-11 — Do: Alert on VPN software you didn't deploy — https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a

3. NetScaler's new SAML flaw hits last week's build — CVE-2026-107406 — Fixed: 14.1-73.46 or 13.1-64.29 — Do: Update every NetScaler running SAML — https://support.citrix.com/external/article/CTX697191/

4. Ollama model pulls can plant root code — CVE-2026-103663 — Fixed: 0.35.0 — Do: Upgrade Ollama and check what it will load — https://cert.pl/en/posts/2026/10/CVE-2026-103663/

5. Cisco License On-Prem resets any password — CVE-2026-20328, CVE-2026-76454 — Fixed: 10-202608 — Do: Upgrade Cisco License On-Prem — https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssm-access-nttb2dhE

6. Ransomware shut a cloud and its consoles — Do: Test a restore without your provider's console — https://www.bleepingcomputer.com/news/security/ransomware-attack-disrupts-japans-idcf-cloud-used-by-govt-clients/

7. Vault deny rules miss differently cased names — CVE-2026-89322, CVE-2026-105818 — Fixed: 2.1.2, 1.21.12, 1.20.17 or 1.19.23 — Do: Lowercase your Vault policies, then upgrade — https://cyber.gc.ca/en/alerts-advisories/hashicorp-security-advisory-av26-1019

8. 17,610 fake GitHub repos re-aimed at malware — Do: Use app control on developer workstations — https://www.bleepingcomputer.com/news/security/fakegit-malware-campaign-returns-with-17-610-malicious-github-repos/

9. Let's Encrypt moves to 64-day certificates — Do: Test your renewals against Let's Encrypt staging — https://letsencrypt.org/2026/10/07/64-day-certs

10. Spirit wants to sell staff Teams chats to Google — Do: Set a retention limit on Teams chats — https://therecord.media/lawmakers-warn-of-google-spirit-ai-training-deal

1. Japan's data thefts came through internal APIs — CVE-2026-72898 — Do: Find the internal APIs your apps expose — https://www.jpcert.or.jp/at/2026/at260030.html

2. Phishing now hides orders for your inbox AI — Do: Confirm every payment change with a phone call — https://blog.barracuda.com/2026/10/07/email-attacks-target-both-humans-ai-assistants

3. SonicWall SMA1000 gets another pre-login flaw — CVE-2026-102255 — Fixed: 12.4.3-03670 or 12.5.0-03082 — Do: Hotfix the SonicWall SMA1000 again — https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017

4. Veeam's Backup Viewer role can run code on v12 — CVE-2025-64393, CVE-2026-93026 — Fixed: 12.3.2.4934 — Do: Patch Veeam 12 and audit Backup Viewer accounts — https://www.veeam.com/kb4934

5. Nexus switches get root-level RCE fixes — CVE-2026-76471, CVE-2026-76465, CVE-2026-76485 (+ 2 more) — Do: Upgrade switches running NX-API, MPLS OAM or NGOAM — https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j

6. Splunk clusters run commands with no login — CVE-2026-76268, CVE-2026-76281 — Fixed: 10.4.3, 10.2.7, 10.0.10 or 9.4.15 — Do: Upgrade Splunk Enterprise on every release line — https://advisory.splunk.com/advisories/SVD-2026-1001

7. Meraki firmware fixes flaws rated up to 9.6 — CVE-2026-76464, CVE-2026-76463 — Fixed: MX 26.1.7 or 26.2.3; MR 33.1.3; MS 26.1.2 or 18.1.9 — Do: Schedule the Meraki firmware upgrades — https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH

8. Attackers messaged ASOS customers through its app — Do: Lock down your customer-messaging platform logins — https://www.rapid7.com/blog/post/it-asos-incident-attackers-using-channels-customers-trust

9. A botnet gets its C2 address from a poem — CVE-2026-42271 — Fixed: LiteLLM 1.83.7 — Do: Get your AI servers off the open internet — https://www.lumen.com/blog/en-us/canto-incognito-tracking-the-poellm-malware

1. FortiBleed is active and locking admins out — Do: Reset Fortinet admin and VPN passwords — https://www.ic3.gov/CSA/2026/261006.pdf

2. Ninja Forms flaw is being used to add admins — CVE-2026-94504, CVE-2026-93836 — Fixed: Ninja Forms 3.15.4 or later, WPC Product Bundles 8.6.7 or later — Do: Update the plugins and check for hidden admins — https://www.wordfence.com/threat-intel/vulnerabilities/id/c599a562-5218-4b37-bcf7-0e82008a4e68?source=cve

3. Hijacked country registries mint real certificates — Do: Watch certificate logs for your domains — https://blog.google/security/chromes-response-to-recent-cctld-registry-hijacks/

4. Chrome 155 fixes 247 flaws, four critical — CVE-2026-106382, CVE-2026-106197, CVE-2026-106358 (+ 1 more) — Fixed: 155.0.8059.39 — Do: Push the Chrome update and force a relaunch — http://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html

5. FBI blames a contractor's missed patch — Do: Verify your contractors' patching yourself — https://www.securityweek.com/fbi-blames-contractors-missed-patch-for-shinyhunters-breach/

6. OpenSSH 10.6 fixes bugs, releases will speed up — Fixed: 10.6 — Do: Upgrade OpenSSH and plan for more releases — https://www.openssh.org/txt/release-10.6

7. Outlook will block .msix attachments by default — Do: Check who needs MSIX attachments first — https://www.theregister.com/software/2026/10/06/microsoft-extends-the-outlook-naughty-step-with-two-more-file-types/5301350

8. Npm package was malicious for over a year — Do: Search your lockfiles for function-flag — https://www.cloudsek.com/blog/malfex-malicious-npm-postinstall-supply-chain-campaign