Live· 42 threats on fire this week· last check 2026-11-03 02:22 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

SeverityThreatCategorySourcesFirst publicSocialAffects you

Friday, Oct 30

critical⚡ Early warningExploitedanthropic.claude-code 2.1.313svc-telemetryBackdoored Claude Code extension 2.1.312 and 2.1.313 served through Cursor's marketplace plants an attacker SSH key and startup persistence on developer machines

Claude Code for VS Code anthropic.claude-code 2.1.312, 2.1.313 (Cursor marketplace builds only) · fix 2.1.314

AI agents & MCPI

2026-10-29

by InfraStack Analyst

43 talking

high⚡ Early warningGo MPTCP defaultGo programs on Linux listen with Multipath TCP by default, exposing servers to the remote-root kernel bug CVE-2026-98432 (Ubuntu and RHEL fixes still pending)

TECH-202610-go-programs-on-linux-listen-with-multipath-tcp-by-default-ex

RuntimeI

2026-10-29 15:57 UTC

by InfraStack Analyst

13 talking

medium⚡ Early warningExploitedApple sends a new round of mercenary spyware threat notifications to targeted iPhone users in 99 countries, tied to new attacks

iOS unknown

VendorI

2026-08-13

by InfraStack Analyst

7 talking

critical⚡ Early warningExploitedNorthflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being used

Northflank all customers (BYOC status unknown)

VendorI

2026-10-30

by InfraStack Analyst

3 talking

criticalExploitedDrupal Commerce Core: missing access check exposes pages to forceful browsing

CVE-2026-118539

PackageIEN

2026-10-30 04:18 UTC

by InfraStack Analyst

3 talking

highExploitedIvanti Connect Secure: predictable identifiers let authenticated attackers upload attacker-controlled files

fix 25.1.1.3, 22.8R2.6 · vendor

VendorIK

2026-10-30

by InfraStack Analyst

3 talking

high⚡ Early warningExploitedBlack OctoberBlack October: at least nine AI developer platforms (Railway, Northflank, Warp, OpenCode, Fireworks AI and others) breached to steal stored AI and cloud keys, which are resold and used for LLMjacking

Railway secrets stored before the Oct 20, 2026 breach

VendorI

2026-10-30

by InfraStack Analyst

2 talking

medium⚡ Early warningExploitedPhishing emails trick users into installing a legitimate Zecurit Agent RMM configured by attackers for remote access (Unit 42)

CMP-202610-phishing-emails-trick-users-into-installing-a-legitimate-zec

VendorI

2026-10-30 20:28 UTC

by InfraStack Analyst

–

high⚡ Early warningExploitedUnpatched WordPress sites (4.7 to 7.1.3) can be taken over during a core update: attackers race to hit the installer in wp-content/upgrade (no CVE)

WordPress >= 4.7, < 7.1.4 · fix 7.1.4, 7.0.8, 6.9.11

PackageI

2026-10-30

by InfraStack Analyst

–

high⚡ Early warningExploitedCryptoBilisHardware wallets sold by reseller CryptoBilis (Trezor Safe 5, Ledger) carry a hidden cellular implant that steals the recovery phrase

Trezor Safe 5 units bought from reseller CryptoBilis since March 2026

VendorI

2026-10-30

by InfraStack Analyst

–

Thursday, Oct 29

high⚡ Early warningExploitedBinance-hacker-1029TraderTraitorBinance hot wallets drained of more than $6B on 29 Oct 2026; FBI attributes the hack to North Korea's TraderTraitor

Binance Binance exchange hot wallets, 29 Oct 2026

VendorI

2026-09-19 01:23 UTC

by InfraStack Analyst

35 talking

high⚡ Early warningExploitedDebugBear RUM compromisePolymarket breached through an unnamed third-party provider: international users' wallets drained (about $2.7M), trading halted

Polymarket international platform (Polymarket.com), 29 Oct 2026

VendorI

2026-10-29

by InfraStack Analyst

8 talking

medium⚡ Early warningSearchjacked319 hidden Chrome extensions (13.4M users) hijack the default search engine and route every search through operator proxies that log queries and pick redirects (Socket 'Searchjacked')

CMP-202610-319-hidden-chrome-extensions-13-4m-users-hijack-the-default-

OtherI

2026-10-29

by InfraStack Analyst

3 talking

high⚡ Early warningExploitedARTEXBLOODALCHEMYVAPOR PANDAChina-linked VAPOR PANDA uses the ARTEX AI agent framework to break into 200+ government, pharma, defense and telecom organisations at once, then plants the BLOODALCHEMY backdoor

CMP-202610-china-linked-vapor-panda-uses-the-artex-ai-agent-framework-t

InfrastructureI

2026-10-29

by InfraStack Analyst

3 talking

critical⚡ Early warningExploitedC3RB3RCerberC3RB3R (Cerber) ransomware is encrypting internet-exposed Synology NAS devices and their backups; Synology confirms attacks on outdated DSM

Synology DSM outdated DSM; < 7.4-90075, < 7.3.2-86009-4, < 7.2.2-72806-9, < 7.2.1-69057-12 (one case on 7.4.1 unexplained) · fix 7.4-90075, 7.3.2-86009-4, 7.2.2-72806-9

VendorI

2026-10-29

by InfraStack Analyst

3 talking

high⚡ Early warningExploitedMalicious Hugging Face models posing as Qwen2 test checkpoints install a crypto miner and reverse shell on GPU inference servers when loaded with trust_remote_code (back after takedown)

CMP-202610-malicious-hugging-face-models-posing-as-qwen2-test-checkpoin

AI agents & MCPI

2026-10-29 22:09 UTC

by InfraStack Analyst

2 talking

high⚡ Early warningExploitedNIK C2nik_panelNIK C2: new Windows malware framework seen in the wild steals credentials, logs keystrokes, can lock screens for ransom, and uses the victim's own OpenAI API key to analyze stolen data

CMP-202610-nik-c2-new-windows-malware-framework-seen-in-the-wild-steals

OtherI

2026-10-29 10:00 UTC

by InfraStack Analyst

1 talking

high⚡ Early warningEMBRACEBuilt-in browsers in AI coding assistants (Cursor, GitHub Copilot, Codex, VS Code, Claude Desktop) let a web page or local file run code, read the whole disk or fake the address bar; Codex and VS Code unpatched (EMBRACE)

Codex all versions as of 2026-10-29

AI agents & MCPI

2026-10-29

by InfraStack Analyst

1 talking

high7.5Rapid ResetTwisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

Twisted <= 26.4.0 · fix 26.10.0rc1 · pypi

PackageG

2026-10-22 21:16 UTC

by GitHub Advisories

–

high⚡ Early warningExploitedAttackers break in through Windows camera management software (CMS.exe) and plant a reverse shell and sideloaded beacons (Huntress)

CMP-202610-attackers-break-in-through-windows-camera-management-softwar

VendorI

2026-10-27 13:00 UTC

by InfraStack Analyst

–

high⚡ Early warningExploitedYobaYobaLoaderYobaDropperFake ChatGPT and Claude desktop apps on GitHub (GPT-5.6 Sol, GPT-6 Astra, Claude Opus) use signed OpenAI/Anthropic installers to load Yoba malware and a crypto miner

CMP-202610-fake-chatgpt-and-claude-desktop-apps-on-github-gpt-5-6-sol-g

AI agents & MCPI

2026-10-27 13:00 UTC

by InfraStack Analyst

–

medium⚡ Early warningclaude-mem setup uploadclaude-mem installer (v15.2.0+) silently uploads the last 30 days of Claude Code, Codex, Gemini CLI and OpenCode prompts to cmem.ai, which passes them to unknown LLM providers

claude-mem >= 15.2.0

AI agents & MCPI

2026-10-29 13:56 UTC

by InfraStack Analyst

–

Wednesday, Oct 28

critical⚡ Early warningExploitedAttackers try GitLab CI regex RCE (CVE-2026-97229) on self-hosted GitLab; upgrading GitLab does not fix installs that use their own Ruby

GitLab self-managed installs without the 12 Oct 2026 fix, and source or custom-image installs on Ruby < 3.3.13 / 3.4.12 / 4.0.9 · fix 3.3.13, 3.4.12, 4.0.9

InfrastructureI

2026-10-28

by InfraStack Analyst

10 talking

high8.6ExploitedCisco ASA and FTD: crafted SSL VPN request forces device reload

vendor

InfrastructureIEKN

2026-10-28 20:18 UTC

by InfraStack Analyst

3 talking

high⚡ Early warningExploitedKeyDriftSilent TrainUAT-11473Volt TyphoonVolt Typhoon's 'Silent Train' hides attacks, including zero-days on SD-WAN and IT management platforms, behind short-lived chains of hacked routers and IoT devices

VeloCloud Orchestrator unknown

InfrastructureI

2026-10-28

by InfraStack Analyst

3 talking

medium⚡ Early warningExploitedSilver FoxKong RATFake DeepSeek desktop-app sites pushed through search results install Silver Fox remote-access malware that kills antivirus

CMP-202610-fake-deepseek-desktop-app-sites-pushed-through-search-result

AI agents & MCPI

2026-10-15

by InfraStack Analyst

1 talking

high⚡ Early warningExploitedPhishing tricks users into enrolling their PCs in attacker-controlled Hexnode or Rippling MDM, which then keeps reinstalling ScreenConnect for remote access

CMP-202610-phishing-tricks-users-into-enrolling-their-pcs-in-attacker-c

VendorI

2026-10-28

by InfraStack Analyst

1 talking

Monday, Nov 2

high⚡ Early warningExploitedDanfoss freezer attacksInternet-exposed Danfoss supermarket refrigeration controllers hijacked to heat fridges and freezers to 50°C overnight; second wave hits 8+ European countries including Romania

Danfoss AK-SM 800A < R4.3.1 · fix R4.3.1

InfrastructureI

2026-10-13

by InfraStack Analyst

5 talking

criticalSMS of DeathAndroid "SMS of Death": one malformed WAP Push text crashes the phone service and drops calls, including emergency calls

android 12, 13 (no fix); 14, 15, 16, 16-qpr2, 17 with security patch level < 2026-11-01 · fix security patch level 2026-11-01 (Android 14, 15, 16, 16-qpr2, 17)

RuntimeIN

2026-10-30

by InfraStack Analyst

3 talking

critical⚡ Early warningExploitedcPGuard breachOPSSHIELD breachcPGuard server security software update channel hijacked: attackers pushed a backdoor that steals root password hashes, SSH keys and cloud tokens (OPSSHIELD confirms)

fix 5.88.25

VendorI

2026-11-02 20:14 UTC

by InfraStack Analyst

–

high⚡ Early warningExploitedMercado Bitcoin, Brazil's largest crypto exchange, breached: about $46M drained from its wallets, deposits and withdrawals halted

CMP-202611-o62s3g