📰 DAILY THREAT BRIEFING
Sunday, October 4, 2026
12 News Items
HN · BleepingComputer · Krebs · Dark Reading · SANS · THN Intel · Unit 42 · Security.com

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of October 4, 2026.

  1. ISC Stormcast For Monday, October 5th, 2026 https://isc.sans.edu/podcastdetail/10122, (Mon, Oct 5th)
    — SANS ISC

    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
  2. TTY Logs and the Data it Captures, (Sun, Oct 4th)
    — SANS ISC

    For an experiment, I created a script [1] that parses and send the TTY logs collected from actors or bots activity that run various commands…
  3. Citrix patches NetScaler SAML zero-day exploited in attacks
    — Bleeping Computer

    Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited …
  4. Anthropic asks Claude users to share voice data for AI model training
    — Bleeping Computer

    Anthropic has started asking Claude users to voluntarily share their voice conversations to help train and improve its AI models. […]
  5. User Agent Strings Curiosities, (Sun, Oct 4th)
    — SANS ISC

    Sometimes I have to smile, or my interest is triggered, when I review new User Agent Strings in the honeypot logs.
  6. ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
    — The Hacker News

    A suspected member of the ShinyHunters digital extortion group, who goes by the online alias "Rey," has been allegedly detained by authoriti…
  7. China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
    — The Hacker News

    A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial in…
  8. Google Gemini could soon get full access to your Mac’s files, apps and the web
    — Bleeping Computer

    Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permissio…
  9. MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
    — The Hacker News

    The U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gather…
  10. RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail
    — Dark Reading

    The offensive cyber operations startup looks to evolve red teaming beyond traditional methods to simulate attackers' increasingly advanced c…
  11. Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
    — Dark Reading

    One company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported at…
  12. SWIFT Banking & Government Middleware Enables RCE
    — Dark Reading

    Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.

🪲 NVD — Last 20 Scored Vulnerabilities

Latest scored CVEs from the National Vulnerability Database (14372 in last 30 days).
Critical: 0 · High: 9 · Medium: 8 · Low: 2. View full dashboard →

  1. CVE-2026-105180
    — CVSS 6.3 (MEDIUM)

    A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manipulation of the argument user/tempUser can l…
  2. CVE-2026-105179
    — CVSS 2.7 (LOW)

    A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password Handler. Executing a manipulation of the argument…
  3. CVE-2026-105178
    — CVSS 4.7 (MEDIUM)

    A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/add_symptom.php of the component Symptom Creation. P…
  4. CVE-2026-105177
    — CVSS 4.7 (MEDIUM)

    A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug Creation. Such manipulation of the argume…
  5. CVE-2026-105176
    — CVSS 4.7 (MEDIUM)

    A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of the argument ID causes sql injection. The attack is…
  6. CVE-2026-105295
    — CVSS 7.5 (HIGH)

    GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attac…
  7. CVE-2026-105294
    — CVSS 7.4 (HIGH)

    Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. Attackers exploiting a Discord…
  8. CVE-2026-105293
    — CVSS 8.1 (HIGH)

    Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the D…
  9. CVE-2026-105292
    — CVSS 5.9 (MEDIUM)

    Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a c…
  10. CVE-2026-105223
    — CVSS 7.4 (HIGH)

    maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-data, ignoring insecure-skip-tls-verify. On…
  11. CVE-2026-105175
    — CVSS 7.3 (HIGH)

    A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add_student.php of the component Student Registration. The manipulation of the argu…
  12. CVE-2026-105174
    — CVSS 5.4 (MEDIUM)

    A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument …
  13. CVE-2026-105173
    — CVSS 3.5 (LOW)

    A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipula…
  14. CVE-2026-105172
    — CVSS 7.3 (HIGH)

    A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql inject…
  15. CVE-2026-105171
    — CVSS 6.3 (MEDIUM)

    A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functio…
  16. CVE-2026-105170
    — CVSS 7.3 (HIGH)

    A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of …
  17. CVE-2026-105169
    — CVSS 7.3 (HIGH)

    A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/deliv…
  18. CVE-2026-105168
    — CVSS 6.3 (MEDIUM)

    A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of …
  19. CVE-2026-105222
    — CVSS 7.4 (HIGH)

    The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is passed to CURLOPT_SSL_VERIFYPEER. On-path at…

Source: NVD CVE API 2.0

Generated by CryptXNet.ai Threat Intelligence Platform · October 4, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC, THN Threat Intel, Unit 42, Security.com