U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog
2026-11-01T02:51:38Z•bd046fcdf169572a79094a7fffc966fabc95ea8740e5456a401f9edd366ab95d
CVE-2026-118539CISA KEVCiscoDHSDrupal Commerce CoreGitLabIvanti Connect SecureNorth KoreaYoba malwareactive exploitationcloud exposurecritical infrastructurecrypto miningcryptocurrency theftdata breachincident responsepublicly exposed storagesupply chainvulnerability remediation
What happened
Security news feed covering active exploitation of Ivanti Connect Secure, Drupal Commerce Core, GitLab, and Cisco vulnerabilities; malware campaigns using fake AI applications to deploy crypto miners; major cryptocurrency theft investigations; sensitive data leaks; suspected cyberattacks against military infrastructure; and widespread publicly exposed cloud storage. Multiple entries indicate active exploitation and significant potential impact, particularly the CISA KEV additions, critical Drupal flaw, large-scale data exposure, and alleged Binance theft.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- bd046fcdf169572a79094a7fffc966fabc95ea8740e5456a401f9edd366ab95d
- Enrichment time
- 2026-11-01T02:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.