U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog
2026-10-31T20:51:35Z•4ec1460ca2ff31e5c7315ae29b88d91cfc10ad43e9bce26e950cf0865fa697a9
CVE-2026-118539CISA KEVCiscoDrupal Commerce CoreGitLabIvanti Connect SecureNorth KoreaYoba malwareactively exploited vulnerabilitiescloud exposurecritical infrastructurecrypto miningcryptocurrency theftdata breachransomwaresupply chain
What happened
Security news feed covering actively exploited Ivanti Connect Secure, Drupal Commerce Core, GitLab, and Cisco vulnerabilities; malware campaigns using fake AI applications; major cryptocurrency theft investigations; data exposure incidents; suspected cyberattacks against military infrastructure; and widespread publicly accessible cloud storage buckets. The most urgent items involve vulnerabilities listed in CISA's KEV catalog and exploitation of CVE-2026-118539 in Drupal Commerce Core.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 4ec1460ca2ff31e5c7315ae29b88d91cfc10ad43e9bce26e950cf0865fa697a9
- Enrichment time
- 2026-10-31T20:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.