Live· 39 threats on fire this week· last check 2026-11-02 13:28 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

SeverityThreatCategorySourcesFirst publicSocialAffects you

Friday, Oct 30

critical⚡ Early warningExploitedanthropic.claude-code 2.1.313svc-telemetryBackdoored Claude Code extension 2.1.312 and 2.1.313 served through Cursor's marketplace plants an attacker SSH key and startup persistence on developer machines

Claude Code for VS Code anthropic.claude-code 2.1.312, 2.1.313 (Cursor marketplace builds only) · fix 2.1.314

AI agents & MCPI

2026-10-29

by InfraStack Analyst

43 talking

high⚡ Early warningGo MPTCP defaultGo programs on Linux listen with Multipath TCP by default, exposing servers to the remote-root kernel bug CVE-2026-98432 (Ubuntu and RHEL fixes still pending)

TECH-202610-go-programs-on-linux-listen-with-multipath-tcp-by-default-ex

RuntimeI

2026-10-29 15:57 UTC

by InfraStack Analyst

12 talking

medium⚡ Early warningExploitedApple sends a new round of mercenary spyware threat notifications to targeted iPhone users in 99 countries, tied to new attacks

iOS unknown

VendorI

2026-08-13

by InfraStack Analyst

7 talking

critical⚡ Early warningExploitedNorthflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being used

Northflank all customers (BYOC status unknown)

VendorI

2026-10-30

by InfraStack Analyst

3 talking

criticalExploitedDrupal Commerce Core: missing access check exposes pages to forceful browsing

CVE-2026-118539

PackageIEN

2026-10-30 04:18 UTC

by InfraStack Analyst

3 talking

highExploitedIvanti Connect Secure: predictable identifiers let authenticated attackers upload attacker-controlled files

fix 25.1.1.3, 22.8R2.6 · vendor

VendorIK

2026-10-30

by InfraStack Analyst

2 talking

medium⚡ Early warningExploitedPhishing emails trick users into installing a legitimate Zecurit Agent RMM configured by attackers for remote access (Unit 42)

CMP-202610-phishing-emails-trick-users-into-installing-a-legitimate-zec

VendorI

2026-10-30 20:28 UTC

by InfraStack Analyst

–

high⚡ Early warningExploitedUnpatched WordPress sites (4.7 to 7.1.3) can be taken over during a core update: attackers race to hit the installer in wp-content/upgrade (no CVE)

WordPress >= 4.7, < 7.1.4 · fix 7.1.4, 7.0.8, 6.9.11

PackageI

2026-10-30

by InfraStack Analyst

–

high⚡ Early warningExploitedCryptoBilisHardware wallets sold by reseller CryptoBilis (Trezor Safe 5, Ledger) carry a hidden cellular implant that steals the recovery phrase

Trezor Safe 5 units bought from reseller CryptoBilis since March 2026

VendorI

2026-10-30

by InfraStack Analyst

–

high⚡ Early warningExploitedBlack OctoberBlack October: at least nine AI developer platforms (Railway, Northflank, Warp, OpenCode, Fireworks AI and others) breached to steal stored AI and cloud keys, which are resold and used for LLMjacking

Railway secrets stored before the Oct 20, 2026 breach

VendorI

2026-10-30

by InfraStack Analyst

–

Thursday, Oct 29

high⚡ Early warningExploitedBinance-hacker-1029TraderTraitorBinance hot wallets drained of more than $6B on 29 Oct 2026; FBI attributes the hack to North Korea's TraderTraitor

Binance Binance exchange hot wallets, 29 Oct 2026

VendorI

2026-09-19 01:23 UTC

by InfraStack Analyst

35 talking

high⚡ Early warningExploitedDebugBear RUM compromisePolymarket breached through an unnamed third-party provider: international users' wallets drained (about $2.7M), trading halted

Polymarket international platform (Polymarket.com), 29 Oct 2026

VendorI

2026-10-29

by InfraStack Analyst

8 talking

medium⚡ Early warningSearchjacked319 hidden Chrome extensions (13.4M users) hijack the default search engine and route every search through operator proxies that log queries and pick redirects (Socket 'Searchjacked')

CMP-202610-319-hidden-chrome-extensions-13-4m-users-hijack-the-default-

OtherI

2026-10-29

by InfraStack Analyst

3 talking

critical⚡ Early warningExploitedC3RB3RCerberC3RB3R (Cerber) ransomware is encrypting internet-exposed Synology NAS devices and their backups; Synology confirms attacks on outdated DSM

Synology DSM outdated DSM; < 7.4-90075, < 7.3.2-86009-4, < 7.2.2-72806-9, < 7.2.1-69057-12 (one case on 7.4.1 unexplained) · fix 7.4-90075, 7.3.2-86009-4, 7.2.2-72806-9

VendorI

2026-10-29

by InfraStack Analyst

3 talking

high⚡ Early warningExploitedMalicious Hugging Face models posing as Qwen2 test checkpoints install a crypto miner and reverse shell on GPU inference servers when loaded with trust_remote_code (back after takedown)

CMP-202610-malicious-hugging-face-models-posing-as-qwen2-test-checkpoin

AI agents & MCPI

2026-10-29 22:09 UTC

by InfraStack Analyst

2 talking

high⚡ Early warningExploitedVAPOR PANDAARTEXBLOODALCHEMYChina-linked VAPOR PANDA uses the ARTEX AI agent framework to break into 200+ government, pharma, defense and telecom organisations at once, then plants the BLOODALCHEMY backdoor

CMP-202610-china-linked-vapor-panda-uses-the-artex-ai-agent-framework-t

InfrastructureI

2026-10-29

by InfraStack Analyst

2 talking

high⚡ Early warningExploitedNIK C2nik_panelNIK C2: new Windows malware framework seen in the wild steals credentials, logs keystrokes, can lock screens for ransom, and uses the victim's own OpenAI API key to analyze stolen data

CMP-202610-nik-c2-new-windows-malware-framework-seen-in-the-wild-steals

OtherI

2026-10-29 10:00 UTC

by InfraStack Analyst

1 talking

high⚡ Early warningEMBRACEBuilt-in browsers in AI coding assistants (Cursor, GitHub Copilot, Codex, VS Code, Claude Desktop) let a web page or local file run code, read the whole disk or fake the address bar; Codex and VS Code unpatched (EMBRACE)

Codex all versions as of 2026-10-29

AI agents & MCPI

2026-10-29

by InfraStack Analyst

1 talking

high7.5Rapid ResetTwisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

Twisted <= 26.4.0 · fix 26.10.0rc1 · pypi

PackageG

2026-10-29 16:41 UTC

by GitHub Advisories

–

high⚡ Early warningExploitedAttackers break in through Windows camera management software (CMS.exe) and plant a reverse shell and sideloaded beacons (Huntress)

CMP-202610-attackers-break-in-through-windows-camera-management-softwar

VendorI

2026-10-27 13:00 UTC

by InfraStack Analyst

–

high⚡ Early warningExploitedYobaYobaLoaderYobaDropperFake ChatGPT and Claude desktop apps on GitHub (GPT-5.6 Sol, GPT-6 Astra, Claude Opus) use signed OpenAI/Anthropic installers to load Yoba malware and a crypto miner

CMP-202610-fake-chatgpt-and-claude-desktop-apps-on-github-gpt-5-6-sol-g

AI agents & MCPI

2026-10-27 13:00 UTC

by InfraStack Analyst

–

medium⚡ Early warningclaude-mem setup uploadclaude-mem installer (v15.2.0+) silently uploads the last 30 days of Claude Code, Codex, Gemini CLI and OpenCode prompts to cmem.ai, which passes them to unknown LLM providers

claude-mem >= 15.2.0

AI agents & MCPI

2026-10-29 13:56 UTC

by InfraStack Analyst

–

Wednesday, Oct 28

critical⚡ Early warningExploitedAttackers try GitLab CI regex RCE (CVE-2026-97229) on self-hosted GitLab; upgrading GitLab does not fix installs that use their own Ruby

GitLab self-managed installs without the 12 Oct 2026 fix, and source or custom-image installs on Ruby < 3.3.13 / 3.4.12 / 4.0.9 · fix 3.3.13, 3.4.12, 4.0.9

InfrastructureI

2026-10-28

by InfraStack Analyst

10 talking

high8.6ExploitedCisco ASA and FTD: crafted SSL VPN request forces device reload

vendor

InfrastructureIEKN

2026-10-28 20:18 UTC

by InfraStack Analyst

3 talking

high⚡ Early warningExploitedKeyDriftSilent TrainUAT-11473Volt TyphoonVolt Typhoon's 'Silent Train' hides attacks, including zero-days on SD-WAN and IT management platforms, behind short-lived chains of hacked routers and IoT devices

VeloCloud Orchestrator unknown