Cybersecurity briefing, 2026-10-28

Apple has backported a fix for an exploited CoreGraphics flaw to iOS and iPadOS 18.7.11.

• Apple extends exploited CoreGraphics fix to iOS 18
• Brotli attempts and Citrix PHP flaws raise code-execution risk
• PeopleSoft patch spans three flaws behind one CVE
• Worm evades GitHub search and steals cPanel credentials
• UNM hospitals reopen as Health Sciences classes stay canceled
• Fake Teams support chats deliver payloads in under 15 minutes
• Android Authenticator flaw exposed work accounts to rogue apps
• Gheist carries GitHub secret theft into private repos and AWS
• GMO desktop breach puts trading account integrity in question
• OpenAI's Terra reaches Critical cyber capability threshold
• Dahua Easy4IP leaves cameras reachable behind firewalls
• EDK II flaw exposes shared firmware to boot-time code execution

Recent editions

• Tuesday, October 27, 2026: UNM hospitals reopen as Health Sciences classes stay canceled · 15 stories
• Monday, October 26, 2026: Downloads files can persist in Codex and expose Claude tokens · 17 stories
• Sunday, October 25, 2026: Collabora backdoors target credential stores as VCO flaws recur · 7 stories
• Saturday, October 24, 2026: EvilTokens uses AI to turn inbox access toward payment fraud · 16 stories
• Friday, October 23, 2026: Ruby regex bugs expose applications beyond GitLab · 19 stories
• Thursday, October 22, 2026: PHP2Shell moves from probes to confirmed shell execution · 18 stories
• Wednesday, October 21, 2026: Cisco's eMudhra review leaves product exposure unresolved · 16 stories