OSINT / CyberSec report 15.10.2026 00:16

1. Microsoft patched a record 1413 vulnerabilities in October 2026 Patch Tuesday, including one actively exploited Windows Shell bug and two publicly disclosed zero-days (BleepingComputer, The Hacker News, KrebsOnSecurity).

2. An attacker chained three Ivanti Connect Secure zero-days to gain root access without logging in; Ivanti patched two flaws, with a fix for the third pending (The Hacker News).

3. A critical Linux kernel flaw named Vghost, tracked as CVE-2026-74580, allows local users to gain root and break out of virtual machines to the host (The Hacker News).

4. A critical heap buffer overflow in Ghostscript, CVE-2026-39919, allows remote code execution via crafted PDF files on servers (BleepingComputer).

5. SAP disclosed a critical CVSS 10 flaw in Cloud SDK for Python that allows OAuth2 credential theft in multi-tenant applications (The Hacker News).

6. Researchers found multiple high-impact vulnerabilities in LiteLLM, including CVE-2026-35029 and CVE-2026-59823, allowing unauthorized config changes (Check Point Research).

7. Docker fixed a critical two-year-old Hub flaw that let one user push, pull, or delete images as another user; no exploitation evidence found (The Hacker News).

8. GitHub tightened npm trusted publishing after a flaw left over 1500 packages vulnerable to hijacking without credential theft (The Hacker News).

9. LG Smart TVs running webOS are vulnerable to pre-auth root takeover from the local network via chained flaws; LG issued a fix (The Hacker News).

10. A Russian AI-enabled influence operation targeted Latin America, using spoofed emails and fake government documents against schools in Peru and Ecuador (Dark Reading).

11. An OpenAI engineer, Abdulrahman Alfozan, was arrested for allegedly planting a hidden recording device in an executive conference room (BleepingComputer, The Hacker News).

12. Ransomware gangs are reportedly embracing physical threats, including family stalking and abduction, though claims are hard to verify (Dark Reading).

13. Anthropic warned that small AI models could soon form self-propagating IoT botnets, challenging to shut down due to no central point (The Hacker News, BleepingComputer).

14. Hackers knocked out refrigeration at hundreds of French supermarkets via Danfoss controllers lacking security updates, spoiling food (Reddit).

15. Researchers ran code inside a Windows SmartScreen VBS enclave using a four-byte write and timing bug, breaking a protected area (The Hacker News).

16. A cyber executive was arrested in a case allegedly tied to the ShinyHunters hacking group (Reddit).

17. GitLab admins were urged to patch a critical remote code execution flaw, CVE-2026-97229 (Reddit).

18. Xandr was fined a record 8.6 million euros for relaying Grindr user data revealing sexual orientation to advertisers (The Hacker News).