News
What we shipped, and what changed.
Short, dated updates from Threatless: product releases, company milestones and brief notes on developments that matter to the people we work with.
Latest
- Industry / November 2, 2026Trezor Warns of a Suspected Hardware Implant in a Reseller's Safe 5Trezor warns of a suspected hardware implant in a Safe 5 bought from reseller CryptoBilis, an extra board that could read and transmit the recovery phrase.Read
- Industry / November 2, 2026Synology warns of C3RB3R ransomware hitting outdated NAS devicesSynology says threat actors are deploying C3RB3R ransomware against NAS devices running outdated DSM, exploiting a flaw it patched in 2024. Update DSM now.Read
- Industry / November 2, 2026Linux Kernel Flaw CVE-2026-98432 Gives Remote Root on MPTCP ServersCVE-2026-98432 is a Linux kernel use-after-free giving unauthenticated remote root on MPTCP servers. Anthropic reports an AI model reached root in 53 minutes.Read
- Industry / November 2, 2026FortiMail zero-day CVE-2026-104286 exploited, added to CISA KEVFortinet FortiMail zero-day CVE-2026-104286 lets unauthenticated attackers write arbitrary files. It is exploited in the wild and now in the CISA KEV catalog.Read
- Industry / November 2, 2026Drupal Commerce access-bypass flaw exploited against online storesDrupal warns an access-bypass flaw in Commerce Core, CVE-2026-118539, is being exploited to tamper with orders and prices on live online stores. Patch now.Read
- Industry / November 2, 2026Malicious Extensions Turn Cursor and Windsurf Into Supply Chain TargetsMalicious extensions are reaching Cursor, Windsurf and other VS Code forks through Open VSX, planting backdoors and stealing SSH keys and source code.Read
- Industry / November 2, 2026Citrix patches NetScaler SAML zero-day CVE-2026-88779 under attackCitrix patched CVE-2026-88779, a SAML authentication zero-day in NetScaler ADC and Gateway rated CVSS 8.7, under active exploitation. CISA added it to KEV.Read
- Industry / November 2, 2026Chainalysis discloses a data breach from agentic AI techniquesChainalysis confirms an attacker used offensive agentic AI to reach user IDs, names, emails and roles, but has not explained the flaws, agents or actor.Read
- Industry / November 2, 2026FBI links record $6.3 billion Binance crypto theft to North KoreaThe FBI tied the record $6.3 billion Binance crypto theft to North Korea's TraderTraitor group. The entry point was one compromised DevOps engineer's laptop.Read
- Industry / November 2, 2026Android 'SMS of Death' flaw crashes phones with no tap, patched Oct 2026Android's October 2026 bulletin patches critical zero-click DoS flaws in MMS PduParser, the 'SMS of Death.' A crafted message crashes phones with no tap.Read
- Industry / November 1, 2026Qilin ransomware led much of 2026, a lesson in exposureQilin ransomware topped many 2026 leaderboards, by several threat-intel counts. It rarely needs a zero-day. Stolen credentials and exposed VPNs are the way in.Read
- Industry / November 1, 2026PHP2Shell: two critical PHP flaws are now under active attackPHP shipped emergency patches for two critical remote code execution flaws called PHP2Shell. CISA added CVE-2026-109618 and CVE-2026-109619 to its KEV catalog.Read
- Industry / November 1, 2026Microsoft's October 2026 Patch Tuesday fixes a record 1,411 flaws, one already exploitedMicrosoft's October 2026 Patch Tuesday fixed a record 1,411 vulnerabilities and three zero-days. CVE-2026-96951, a Windows Shell bypass, is already exploited.Read
- Industry / November 1, 2026Ivanti Connect Secure zero-day chain gives root on patched VPNsVolexity found an Ivanti Connect Secure zero-day chain that gives unauthenticated root on fully patched VPN appliances. CISA added CVE-2026-104935 to KEV.Read
- Industry / November 1, 2026Gemini 4 Carbon and the new shape of AI cyber defenseGoogle unveiled Gemini 4 Carbon, a model built for AI cyber defense, as offense goes agentic. What its vendor-reported benchmarks and guardrails mean.Read
- Industry / November 1, 2026CISA flags an actively exploited GitLab flaw as organizations rush to patchCISA added a critical GitLab flaw, CVE-2026-97229, to its Known Exploited Vulnerabilities (KEV) catalog after active exploitation. Patch GitLab CE and EE now.Read
- Industry / November 1, 2026Cisco patches an actively exploited ASA and FTD VPN flawCisco patched CVE-2026-76418, an actively exploited SSL VPN flaw in Secure Firewall ASA and FTD rated 8.6 that reloads the device. CISA added it to KEV.Read
- Industry / November 1, 2026Black October 2026: the month cybersecurity set recordsBlack October 2026 set records for CVEs, exploited flaws, AI-driven attacks and losses. A sourced retrospective, and why continuous exposure management matters.Read
- Industry / November 1, 2026The $6.3 billion Binance theft and what it says about exposureBinance reported a roughly $6.3 billion theft, described as the largest crypto theft on record. The security lesson is attack path and exposure, not crypto.Read
- Industry / November 1, 2026An unreleased AI model found and chained real exploits across browsers and operating systemsAnthropic says an unreleased internal Claude model chained working exploits across Chrome, Safari, Android, Windows and Linux. Vendors have since patched.Read
- Industry / November 1, 2026Threat actors are now running real intrusions with AI agentsCrowdStrike says four threat actors ran AI agents inside real intrusions, and an agentic pentest tool is tied to 200-plus targets. What AI-driven offense means.Read
Start here
What do you need to know for certain?
Tell us what is at stake. We will propose the right starting point: a platform briefing, a scoped engagement or a conversation with our researchers.