Cybersecurity briefing, 2026-11-01

Ivanti Connect Secure is the lead operational concern.

• Ivanti Connect Secure chain reaches root without an account
• DebugBear snippet let attackers trade through Polymarket sessions
• NetamLoader uses trusted files to target custom Windows 10
• LXD flaw lets public certificates impersonate trusted clients
• AP account takeover carried Assad-linked campaign into markets
• Chainalysis breach exposes customer identities and roles

Recent editions

• Saturday, October 31, 2026: PAN-OS PHP2Shell chain stole Active Directory credentials · 17 stories
• Friday, October 30, 2026: Cisco VPN flaw reboots firewalls as Volt Typhoon targets control planes · 20 stories
• Thursday, October 29, 2026: DHS leak maps undercover work and application access · 18 stories
• Wednesday, October 28, 2026: Apple extends exploited CoreGraphics fix to iOS 18 · 18 stories
• Tuesday, October 27, 2026: UNM hospitals reopen as Health Sciences classes stay canceled · 15 stories
• Monday, October 26, 2026: Downloads files can persist in Codex and expose Claude tokens · 17 stories
• Sunday, October 25, 2026: Collabora backdoors target credential stores as VCO flaws recur · 7 stories