Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
2026-11-03T14:51:41Z•fe97f2555b8c0b1c0701194a118e5af76d2fb5f7baf6212d88ffe9ce3603060b
CVE-2026-111357CVE-2026-111497CVE-2026-118527AI-assisted-malwareAndroid-TVBrotliBunCISA-KEVEnvoyHTTP/2Ivanti-Connect-SecureMCPNode.jsOT-securityPythonactive-exploitationagentic-attacksbotnetcryptocurrency-walletdata-breachfirmware-backdoorhardware-implantinfostealerremote-code-executionretailsupply-chain-securityvirtual-patchingvulnerability
What happened
Help Net Security coverage includes a critical HTTP/2 compression-library RCE (HTTP2Shell, CVE-2026-111497), actively exploited Ivanti Connect Secure vulnerabilities added to CISA’s KEV catalog, a large Android TV botnet using firmware backdoors, an AI-assisted Windows infostealer, supply-chain risks involving deprecated MCP servers and implanted cryptocurrency wallets, cyberattacks against supermarket refrigeration systems, and a breach of Chainalysis using agentic techniques.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- fe97f2555b8c0b1c0701194a118e5af76d2fb5f7baf6212d88ffe9ce3603060b
- Enrichment time
- 2026-11-03T14:51:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.