Kali Linux 2026.3 released with 6 new tools, desktop updates

2026-10-26T13:23:22Z•6d6fbe2f7c298f1cc5f162abbb2b38ea8250e88ba712e1de1b13064821da7096
CVE-2026-109618CVE-2026-109619AI agent securityArubaOSBaton DropLinuxPHP2ShellSecure Boot bypassUEFI bootkitVeloCloud Orchestratoractive exploitationcloud securitycredential theftdata breachend of supportmalwarephishingremote code executionsecret rotationsupply chain compromisezero-day

What happened

BleepingComputer security news feed covering multiple significant developments, including actively exploited critical PHP remote-code-execution vulnerabilities, a Secure Boot-bypassing UEFI bootkit, software supply-chain compromise, exposed patient and customer data, cloud secret-rotation warnings, and an actively exploited VeloCloud Orchestrator zero-day. The feed also includes product updates, end-of-support guidance, and emerging AI-agent security risks.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
6d6fbe2f7c298f1cc5f162abbb2b38ea8250e88ba712e1de1b13064821da7096
Enrichment time
2026-10-26T13:23:22Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.