Today's brief_
The five threats defenders should see today
- 01
CVECriticalCVEPHP shipped emergency updates for flaws that could execute codePHP shipped emergency updates for two critical vulnerabilities affecting web-serving installations, after Cloudflare reported attempted exploitation. - 02
CVEHighUEFIBlackX UEFI bootkit targeted Central Asian diplomatic agenciesBlackX targeted diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan in early 2026, Kaspersky said in a report published Oct 22, 2026. - 03
CVEMediumCVESiemens APOGEE, TALON and Desigo flaws could cause denial of serviceCISA said multiple flaws in Siemens APOGEE, TALON and Desigo products could affect device availability. The advisory was published Oct 22, 2026. - 04
AGENTMediumX402x402 vulnerabilities could bypass payments and expose walletsV12 disclosed three critical x402 vulnerabilities that could bypass payments, sign in to target sites as a wallet, or authorize a client’s full token balance. V12 published its findings Oct 22, 2026. - 05
AGENTHighAISOCRadar uncovers AI-driven intrusion ecosystem tied to ransomware affiliatesSOCRadar said INC and The Gentlemen affiliates ran AI-assisted intrusions and actively exploited FortiClient EMS, SimpleHelp and cPanel. SOCRadar published the findings on Oct 20, 2026.