Oct 29, 2026 · #113

Security Brief Daily | 29 Oct 2026

• Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys — The Hacker News
  Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them...
• Sony ISP subsidiary data breach exposes 2.5 million customer records — Bleeping Computer
  Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers' personal information. [...]
• Volt Typhoon hides zero-day attacks using 'Silent Train' framework — Bleeping Computer
  Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]
• Police seize Virtualine bulletproof service tied to ransowmare, cybercrime — Bleeping Computer
  U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. [...]
• Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass — The Hacker News
  Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows -...
• CISA warns of hackers now exploiting critical Node2Shell flaw — Bleeping Computer
  On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
• Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces — The Hacker News
  Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to...
• American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed — The Hacker News
  Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer...

Security Brief Daily is an AI-generated podcast. Always verify critical information with primary sources.