Cybersecurity briefing, 2026-10-30

PHP for Windows has four rebuilds with Brotli 1.2.1, fixing a decoder flaw.

• PHP for Windows rebuild masks its Brotli security fix
• Cisco VPN flaw reboots firewalls as Volt Typhoon targets control planes
• PHP2Shell chain carried firewall access into Active Directory
• Binance incident puts stablecoin issuers in the response path
• DHS leak maps undercover work and application access
• VAPOR PANDA scales espionage by seeking Falcon gaps
• Ruby regex bugs expose applications beyond GitLab
• UNM hospitals reopen as Health Sciences classes stay canceled
• Gheist’s Base32 trick exposes GitHub Actions secrets
• Amadeus breach exposes 92,000 Japan Airlines customer records
• NIK C2 joins data theft with screen-locking ransomware

Recent editions

• Thursday, October 29, 2026: Cisco VPN flaw reboots firewalls as Volt Typhoon targets control planes · 19 stories
• Wednesday, October 28, 2026: Apple extends exploited CoreGraphics fix to iOS 18 · 19 stories
• Tuesday, October 27, 2026: UNM hospitals reopen as Health Sciences classes stay canceled · 15 stories
• Monday, October 26, 2026: Downloads files can persist in Codex and expose Claude tokens · 17 stories
• Sunday, October 25, 2026: Collabora backdoors target credential stores as VCO flaws recur · 7 stories
• Saturday, October 24, 2026: AI speeds attackers and shifts API costs to victims · 16 stories
• Friday, October 23, 2026: Ruby regex bugs expose applications beyond GitLab · 19 stories