Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION
2026-11-01T14:51:38Z•d24bcdf96b5f2649863bb154f27e3a5469d856ca4f654e19049128e81edadde1
CVE-2026-118539AndroidCISA KEVCiscoDHSDrupal Commerce CoreGitLabIvanti Connect SecureNorth KoreaSMS denial of serviceactive exploitationcrypto theftcryptominingdata breachmalwareransomwaresupply-chain attackvulnerability managementzero-click
What happened
Security Affairs RSS feed covering active exploitation of Ivanti Connect Secure, Drupal Commerce Core, GitLab, and Cisco vulnerabilities; a zero-click Android SMS denial-of-service attack affecting calls and emergency services; malware campaigns disguised as AI applications; major cryptocurrency theft activity attributed to North Korea; and data exposure affecting more than 40,000 DHS employees. The feed is a broad newsletter aggregation rather than a single incident.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- d24bcdf96b5f2649863bb154f27e3a5469d856ca4f654e19049128e81edadde1
- Enrichment time
- 2026-11-01T14:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.