Live· 36 threats on fire this week· last check 2026-10-31 23:22 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

SeverityThreatCategorySourcesFirst publicSocialAffects you

Friday, Oct 30

critical⚡ Early warningExploitedanthropic.claude-code 2.1.313svc-telemetryBackdoored Claude Code extension 2.1.312 and 2.1.313 served through Cursor's marketplace plants an attacker SSH key and startup persistence on developer machines

Claude Code for VS Code anthropic.claude-code 2.1.312, 2.1.313 (Cursor marketplace builds only) · fix 2.1.314

AI agents & MCPI

2026-10-29

by InfraStack Analyst

43 talking

high⚡ Early warningGo MPTCP defaultGo programs on Linux listen with Multipath TCP by default, exposing servers to the remote-root kernel bug CVE-2026-98432 (Ubuntu and RHEL fixes still pending)

TECH-202610-go-programs-on-linux-listen-with-multipath-tcp-by-default-ex

RuntimeI

2026-10-29 15:57 UTC

by InfraStack Analyst

8 talking

medium⚡ Early warningExploitedApple sends a new round of mercenary spyware threat notifications to targeted iPhone users in 99 countries, tied to new attacks

iOS unknown

VendorI

2026-08-13

by InfraStack Analyst

7 talking

critical⚡ Early warningExploitedNorthflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being used

Northflank all customers (BYOC status unknown)

VendorI

2026-10-30

by InfraStack Analyst

3 talking

criticalExploitedDrupal Commerce Core: missing access check exposes pages to forceful browsing

CVE-2026-118539

PackageIEN

2026-10-30 04:18 UTC

by InfraStack Analyst

3 talking

highExploitedIvanti Connect Secure: predictable identifiers let authenticated attackers upload attacker-controlled files

fix 25.1.1.3, 22.8R2.6 · vendor

VendorIK

2026-10-30

by InfraStack Analyst

1 talking

medium⚡ Early warningExploitedPhishing emails trick users into installing a legitimate Zecurit Agent RMM configured by attackers for remote access (Unit 42)

CMP-202610-phishing-emails-trick-users-into-installing-a-legitimate-zec

VendorI

2026-10-30 20:28 UTC

by InfraStack Analyst

–

high⚡ Early warningExploitedUnpatched WordPress sites (4.7 to 7.1.3) can be taken over during a core update: attackers race to hit the installer in wp-content/upgrade (no CVE)

WordPress >= 4.7, < 7.1.4 · fix 7.1.4, 7.0.8, 6.9.11

PackageI

2026-10-30

by InfraStack Analyst

–

high⚡ Early warningExploitedCryptoBilisHardware wallets sold by reseller CryptoBilis (Trezor Safe 5, Ledger) carry a hidden cellular implant that steals the recovery phrase

Trezor Safe 5 units bought from reseller CryptoBilis since March 2026

VendorI

2026-10-30

by InfraStack Analyst

–

high⚡ Early warningExploitedBlack OctoberBlack October: at least nine AI developer platforms (Railway, Northflank, Warp, OpenCode, Fireworks AI and others) breached to steal stored AI and cloud keys, which are resold and used for LLMjacking

Railway secrets stored before the Oct 20, 2026 breach

VendorI

2026-10-30

by InfraStack Analyst

–

Thursday, Oct 29

high⚡ Early warningExploitedBinance-hacker-1029TraderTraitorBinance hot wallets drained of about $3.3-5.6B in a suspected hack; Binance investigating, vector unknown

Binance Binance exchange hot wallets, 29 Oct 2026

VendorI

2026-09-19 01:23 UTC

by InfraStack Analyst

29 talking

high⚡ Early warningExploitedDebugBear RUM compromisePolymarket breached through an unnamed third-party provider: international users' wallets drained (about $2.7M), trading halted

Polymarket international platform (Polymarket.com), 29 Oct 2026

VendorI

2026-10-29

by InfraStack Analyst

8 talking

medium⚡ Early warningSearchjacked319 hidden Chrome extensions (13.4M users) hijack the default search engine and route every search through operator proxies that log queries and pick redirects (Socket 'Searchjacked')

CMP-202610-319-hidden-chrome-extensions-13-4m-users-hijack-the-default-

OtherI

2026-10-29

by InfraStack Analyst

3 talking

high⚡ Early warningExploitedMalicious Hugging Face models posing as Qwen2 test checkpoints install a crypto miner and reverse shell on GPU inference servers when loaded with trust_remote_code (back after takedown)

CMP-202610-malicious-hugging-face-models-posing-as-qwen2-test-checkpoin

AI agents & MCPI

2026-10-29 22:09 UTC

by InfraStack Analyst

2 talking

high⚡ Early warningExploitedVAPOR PANDAARTEXBLOODALCHEMYChina-linked VAPOR PANDA uses the ARTEX AI agent framework to break into 200+ government, pharma, defense and telecom organisations at once, then plants the BLOODALCHEMY backdoor

CMP-202610-china-linked-vapor-panda-uses-the-artex-ai-agent-framework-t

InfrastructureI

2026-10-29

by InfraStack Analyst

2 talking

high⚡ Early warningExploitedNIK C2nik_panelNIK C2: new Windows malware framework seen in the wild steals credentials, logs keystrokes, can lock screens for ransom, and uses the victim's own OpenAI API key to analyze stolen data

CMP-202610-nik-c2-new-windows-malware-framework-seen-in-the-wild-steals

OtherI

2026-10-29 10:00 UTC

by InfraStack Analyst

1 talking

high⚡ Early warningEMBRACEBuilt-in browsers in AI coding assistants (Cursor, GitHub Copilot, Codex, VS Code, Claude Desktop) let a web page or local file run code, read the whole disk or fake the address bar; Codex and VS Code unpatched (EMBRACE)

Codex all versions as of 2026-10-29

AI agents & MCPI

2026-10-29

by InfraStack Analyst

1 talking

critical⚡ Early warningExploitedC3RB3RCerberC3RB3R (Cerber) ransomware is encrypting internet-exposed Synology NAS devices and their backups; Synology confirms attacks on outdated DSM

Synology DSM outdated DSM; < 7.4-90075, < 7.3.2-86009-4, < 7.2.2-72806-9, < 7.2.1-69057-12 (one case on 7.4.1 unexplained) · fix 7.4-90075, 7.3.2-86009-4, 7.2.2-72806-9

VendorI

2026-10-29

by InfraStack Analyst

1 talking

high7.5Rapid ResetTwisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

Twisted <= 26.4.0 · fix 26.10.0rc1 · pypi

PackageG

2026-10-29 16:41 UTC

by GitHub Advisories

–

high⚡ Early warningExploitedAttackers break in through Windows camera management software (CMS.exe) and plant a reverse shell and sideloaded beacons (Huntress)

CMP-202610-attackers-break-in-through-windows-camera-management-softwar

VendorI

2026-10-27 13:00 UTC

by InfraStack Analyst

–

high⚡ Early warningExploitedYobaYobaLoaderYobaDropperFake ChatGPT and Claude desktop apps on GitHub (GPT-5.6 Sol, GPT-6 Astra, Claude Opus) use signed OpenAI/Anthropic installers to load Yoba malware and a crypto miner

CMP-202610-fake-chatgpt-and-claude-desktop-apps-on-github-gpt-5-6-sol-g

AI agents & MCPI

2026-10-27 13:00 UTC

by InfraStack Analyst

–

medium⚡ Early warningclaude-mem setup uploadclaude-mem installer (v15.2.0+) silently uploads the last 30 days of Claude Code, Codex, Gemini CLI and OpenCode prompts to cmem.ai, which passes them to unknown LLM providers

claude-mem >= 15.2.0

AI agents & MCPI

2026-10-29 13:56 UTC

by InfraStack Analyst

–

Wednesday, Oct 28

critical⚡ Early warningExploitedAttackers try GitLab CI regex RCE (CVE-2026-97229) on self-hosted GitLab; upgrading GitLab does not fix installs that use their own Ruby

GitLab self-managed installs without the 12 Oct 2026 fix, and source or custom-image installs on Ruby < 3.3.13 / 3.4.12 / 4.0.9 · fix 3.3.13, 3.4.12, 4.0.9

InfrastructureI

2026-10-28

by InfraStack Analyst

6 talking

high8.6ExploitedCisco ASA and FTD: crafted SSL VPN request forces device reload

vendor

InfrastructureIEKN

2026-10-28 20:18 UTC

by InfraStack Analyst

3 talking

high⚡ Early warningExploitedKeyDriftSilent TrainUAT-11473Volt TyphoonVolt Typhoon's 'Silent Train' hides attacks, including zero-days on SD-WAN and IT management platforms, behind short-lived chains of hacked routers and IoT devices

VeloCloud Orchestrator unknown

InfrastructureI

2026-10-28

by InfraStack Analyst

3 talking

medium⚡ Early warningExploitedSilver FoxKong RATFake DeepSeek desktop-app sites pushed through search results install Silver Fox remote-access malware that kills antivirus

CMP-202610-fake-deepseek-desktop-app-sites-pushed-through-search-result

AI agents & MCPI

2026-10-15

by InfraStack Analyst

1 talking

high⚡ Early warningExploitedPhishing tricks users into enrolling their PCs in attacker-controlled Hexnode or Rippling MDM, which then keeps reinstalling ScreenConnect for remote access

CMP-202610-phishing-tricks-users-into-enrolling-their-pcs-in-attacker-c

VendorI

2026-10-28

by InfraStack Analyst

1 talking

medium⚡ Early warningExploitedFake GrapheneOS download site (installgarphenos[.]ink) serves Mac malware as GrapheneOS.zip

CMP-202610-fake-grapheneos-download-site-installgarphenos-ink-serves-ma

OtherI

2026-10-28 22:10 UTC

by InfraStack Analyst

–

Sunday, Oct 25

high⚡ Early warningTailwormUnpatched Tailscale SSH flaws (Tailworm) let one compromised device get root on other servers in the tailnet

Tailscale <= 1.104.2

InfrastructureI

2026-10-25

by InfraStack Analyst

5 talking

Tuesday, Oct 27

critical⚡ Early warningExploitedGMO Onamae.com Desktop Cloud (FX trading VDI) breached: stored broker logins used for unauthorized trades, $50M extortion

CMP-202610-gmo-onamae-com-desktop-cloud-fx-trading-vdi-breached-stored-

VendorI

2026-10-27 01:30 UTC

by InfraStack Analyst

3 talking

high⚡ Early warningExploitedGhostActionGhostAction uses stolen GitHub tokens to plant credential-stealing workflows and a fake-font VS Code stealer in thousands of repos

GitHub Actions repos pushed to with stolen tokens

PackageI

2026-10-27

by InfraStack Analyst

2 talking

high⚡ Early warningExploitedMagecart skimmer planted in Convertr's self-hosted Plausible analytics script steals card data on Brazilian checkout pages

CMP-202610-magecart-skimmer-planted-in-convertr-s-self-hosted-plausible

VendorI

2026-10-27 20:57 UTC

by InfraStack Analyst

1 talking

high⚡ Early warningExploitedbonto.io wallet extensionsFake Phantom, Jupiter and Bitget wallet extensions on Firefox Add-ons steal recovery phrases and private keys and drain funds (bonto.io)

CMP-202610-fake-phantom-jupiter-and-bitget-wallet-extensions-on-firefox

PackageI

2026-10-27

by InfraStack Analyst

1 talking

Saturday, Oct 31

medium⚡ Early warningExploitedChainalysis breached by an attacker using AI agent tooling: names, emails, user IDs and roles of customer platform users exposed

CMP-202610-chainalysis-breached-by-an-attacker-using-ai-agent-tooling-n

VendorI

2026-10-31

by InfraStack Analyst

2 talking

high⚡ Early warningSMS of DeathAndroid 'SMS of Death' (CVE-2026-58882): one crafted text message crashes the phone's cellular service, with public exploit code; Android 12 and 13 get no fix

Android Android 12, 13 (no fix); Android 14-17 before 2026-10 security patch · fix 2026-10 security update (Android 14-17)

RuntimeI

2026-10-31 15:35 UTC

by InfraStack Analyst

–

high⚡ Early warningVOLTAVOLTA-AUTODOXERVOLTA infostealer for Windows steals passwords, sessions, cloud/SSH keys and crypto wallets, then uses LLMs via OpenRouter to rank each victim's most valuable assets (Talos)

CMP-202610-volta-infostealer-for-windows-steals-passwords-sessions-clou

OtherI

2026-10-31

by InfraStack Analyst

–

← Friday, May 29On fire · last 7 daysSunday, May 31 →

Live· 36 threats on fire this week· last check 2026-10-31 23:22 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

SeverityThreatCategorySourcesFirst publicSocialAffects you

Friday, Oct 30

Claude Code for VS Code anthropic.claude-code 2.1.312, 2.1.313 (Cursor marketplace builds only) · fix 2.1.314

AI agents & MCPI

2026-10-29

by InfraStack Analyst

43 talking

high⚡ Early warningGo MPTCP defaultGo programs on Linux listen with Multipath TCP by default, exposing servers to the remote-root kernel bug CVE-2026-98432 (Ubuntu and RHEL fixes still pending)

TECH-202610-go-programs-on-linux-listen-with-multipath-tcp-by-default-ex

RuntimeI

2026-10-29 15:57 UTC

by InfraStack Analyst

8 talking

medium⚡ Early warningExploitedApple sends a new round of mercenary spyware threat notifications to targeted iPhone users in 99 countries, tied to new attacks

iOS unknown

VendorI

2026-08-13

by InfraStack Analyst

7 talking

critical⚡ Early warningExploitedNorthflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being used

Northflank all customers (BYOC status unknown)

VendorI

2026-10-30

by InfraStack Analyst

3 talking

criticalExploitedDrupal Commerce Core: missing access check exposes pages to forceful browsing

CVE-2026-118539

PackageIEN

2026-10-30 04:18 UTC

by InfraStack Analyst

3 talking

highExploitedIvanti Connect Secure: predictable identifiers let authenticated attackers upload attacker-controlled files

fix 25.1.1.3, 22.8R2.6 · vendor

VendorIK

2026-10-30

by InfraStack Analyst

1 talking

medium⚡ Early warningExploitedPhishing emails trick users into installing a legitimate Zecurit Agent RMM configured by attackers for remote access (Unit 42)

CMP-202610-phishing-emails-trick-users-into-installing-a-legitimate-zec

VendorI

2026-10-30 20:28 UTC

by InfraStack Analyst

–

high⚡ Early warningExploitedUnpatched WordPress sites (4.7 to 7.1.3) can be taken over during a core update: attackers race to hit the installer in wp-content/upgrade (no CVE)

WordPress >= 4.7, < 7.1.4 · fix 7.1.4, 7.0.8, 6.9.11

PackageI

2026-10-30

by InfraStack Analyst

–

high⚡ Early warningExploitedCryptoBilisHardware wallets sold by reseller CryptoBilis (Trezor Safe 5, Ledger) carry a hidden cellular implant that steals the recovery phrase

Trezor Safe 5 units bought from reseller CryptoBilis since March 2026

VendorI

2026-10-30

by InfraStack Analyst

–

Railway secrets stored before the Oct 20, 2026 breach

VendorI

2026-10-30

by InfraStack Analyst

–

Thursday, Oct 29

high⚡ Early warningExploitedBinance-hacker-1029TraderTraitorBinance hot wallets drained of about $3.3-5.6B in a suspected hack; Binance investigating, vector unknown

Binance Binance exchange hot wallets, 29 Oct 2026

VendorI

2026-09-19 01:23 UTC

by InfraStack Analyst

29 talking

high⚡ Early warningExploitedDebugBear RUM compromisePolymarket breached through an unnamed third-party provider: international users' wallets drained (about $2.7M), trading halted

Polymarket international platform (Polymarket.com), 29 Oct 2026

VendorI

2026-10-29

by InfraStack Analyst

8 talking

CMP-202610-319-hidden-chrome-extensions-13-4m-users-hijack-the-default-

OtherI

2026-10-29

by InfraStack Analyst

3 talking

CMP-202610-malicious-hugging-face-models-posing-as-qwen2-test-checkpoin

AI agents & MCPI

2026-10-29 22:09 UTC

by InfraStack Analyst

2 talking

CMP-202610-china-linked-vapor-panda-uses-the-artex-ai-agent-framework-t

InfrastructureI

2026-10-29

by InfraStack Analyst

2 talking

CMP-202610-nik-c2-new-windows-malware-framework-seen-in-the-wild-steals

OtherI

2026-10-29 10:00 UTC

by InfraStack Analyst

1 talking

Codex all versions as of 2026-10-29

AI agents & MCPI

2026-10-29

by InfraStack Analyst

1 talking

critical⚡ Early warningExploitedC3RB3RCerberC3RB3R (Cerber) ransomware is encrypting internet-exposed Synology NAS devices and their backups; Synology confirms attacks on outdated DSM

Synology DSM outdated DSM; < 7.4-90075, < 7.3.2-86009-4, < 7.2.2-72806-9, < 7.2.1-69057-12 (one case on 7.4.1 unexplained) · fix 7.4-90075, 7.3.2-86009-4, 7.2.2-72806-9

VendorI

2026-10-29

by InfraStack Analyst

1 talking

high7.5Rapid ResetTwisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

Twisted <= 26.4.0 · fix 26.10.0rc1 · pypi

PackageG

2026-10-29 16:41 UTC

by GitHub Advisories

–

high⚡ Early warningExploitedAttackers break in through Windows camera management software (CMS.exe) and plant a reverse shell and sideloaded beacons (Huntress)

CMP-202610-attackers-break-in-through-windows-camera-management-softwar

VendorI

2026-10-27 13:00 UTC

by InfraStack Analyst

–

CMP-202610-fake-chatgpt-and-claude-desktop-apps-on-github-gpt-5-6-sol-g

AI agents & MCPI

2026-10-27 13:00 UTC

by InfraStack Analyst

–

claude-mem >= 15.2.0

AI agents & MCPI

2026-10-29 13:56 UTC

by InfraStack Analyst

–

Wednesday, Oct 28

critical⚡ Early warningExploitedAttackers try GitLab CI regex RCE (CVE-2026-97229) on self-hosted GitLab; upgrading GitLab does not fix installs that use their own Ruby

GitLab self-managed installs without the 12 Oct 2026 fix, and source or custom-image installs on Ruby < 3.3.13 / 3.4.12 / 4.0.9 · fix 3.3.13, 3.4.12, 4.0.9

InfrastructureI

2026-10-28

by InfraStack Analyst

6 talking

high8.6ExploitedCisco ASA and FTD: crafted SSL VPN request forces device reload

vendor

InfrastructureIEKN

2026-10-28 20:18 UTC

by InfraStack Analyst

3 talking

VeloCloud Orchestrator unknown

InfrastructureI

2026-10-28

by InfraStack Analyst

3 talking

medium⚡ Early warningExploitedSilver FoxKong RATFake DeepSeek desktop-app sites pushed through search results install Silver Fox remote-access malware that kills antivirus

CMP-202610-fake-deepseek-desktop-app-sites-pushed-through-search-result

AI agents & MCPI

2026-10-15

by InfraStack Analyst

1 talking

high⚡ Early warningExploitedPhishing tricks users into enrolling their PCs in attacker-controlled Hexnode or Rippling MDM, which then keeps reinstalling ScreenConnect for remote access

CMP-202610-phishing-tricks-users-into-enrolling-their-pcs-in-attacker-c

VendorI

2026-10-28

by InfraStack Analyst

1 talking

medium⚡ Early warningExploitedFake GrapheneOS download site (installgarphenos[.]ink) serves Mac malware as GrapheneOS.zip

CMP-202610-fake-grapheneos-download-site-installgarphenos-ink-serves-ma

OtherI

2026-10-28 22:10 UTC

by InfraStack Analyst

–

Sunday, Oct 25

high⚡ Early warningTailwormUnpatched Tailscale SSH flaws (Tailworm) let one compromised device get root on other servers in the tailnet

Tailscale <= 1.104.2

InfrastructureI

2026-10-25

by InfraStack Analyst

5 talking

Tuesday, Oct 27

critical⚡ Early warningExploitedGMO Onamae.com Desktop Cloud (FX trading VDI) breached: stored broker logins used for unauthorized trades, $50M extortion

CMP-202610-gmo-onamae-com-desktop-cloud-fx-trading-vdi-breached-stored-

VendorI

2026-10-27 01:30 UTC

by InfraStack Analyst

3 talking

high⚡ Early warningExploitedGhostActionGhostAction uses stolen GitHub tokens to plant credential-stealing workflows and a fake-font VS Code stealer in thousands of repos

GitHub Actions repos pushed to with stolen tokens

PackageI

2026-10-27

by InfraStack Analyst

2 talking

high⚡ Early warningExploitedMagecart skimmer planted in Convertr's self-hosted Plausible analytics script steals card data on Brazilian checkout pages

CMP-202610-magecart-skimmer-planted-in-convertr-s-self-hosted-plausible

VendorI

2026-10-27 20:57 UTC

by InfraStack Analyst

1 talking

high⚡ Early warningExploitedbonto.io wallet extensionsFake Phantom, Jupiter and Bitget wallet extensions on Firefox Add-ons steal recovery phrases and private keys and drain funds (bonto.io)

CMP-202610-fake-phantom-jupiter-and-bitget-wallet-extensions-on-firefox

PackageI

2026-10-27

by InfraStack Analyst

1 talking

Saturday, Oct 31

medium⚡ Early warningExploitedChainalysis breached by an attacker using AI agent tooling: names, emails, user IDs and roles of customer platform users exposed

CMP-202610-chainalysis-breached-by-an-attacker-using-ai-agent-tooling-n

VendorI

2026-10-31

by InfraStack Analyst

2 talking

high⚡ Early warningSMS of DeathAndroid 'SMS of Death' (CVE-2026-58882): one crafted text message crashes the phone's cellular service, with public exploit code; Android 12 and 13 get no fix

Android Android 12, 13 (no fix); Android 14-17 before 2026-10 security patch · fix 2026-10 security update (Android 14-17)

RuntimeI

2026-10-31 15:35 UTC

by InfraStack Analyst

–

CMP-202610-volta-infostealer-for-windows-steals-passwords-sessions-clou

OtherI

2026-10-31

by InfraStack Analyst

–

← Friday, May 29On fire · last 7 daysSunday, May 31 →