Today's brief_
The five threats defenders should see today
- 01
CVECriticalPATCHAdobe patches Campaign Classic flaws that could enable code executionAdobe patched critical Campaign Classic vulnerabilities that could enable code execution, security feature bypass and privilege escalation, plus a critical Connect code-injection flaw. - 02
CVECriticalCVEAnthropic model chained flaws into Chrome, Safari and Linux exploitsAnthropic said an unreleased AI model chained flaws into working exploits affecting Chrome, Safari, Android, Windows and Linux. - 03
LEAKMediumBREACHGMO Internet Group reward program follows Onamae.com Desktop Cloud breachGMO Internet Group opened a reward program offering up to $1 million after attackers breached its Onamae.com Desktop Cloud service, The Hacker News reported. - 04
AI-ATKMediumTEAMSMicrosoft Teams external chat abused in more than 400 incidentsArctic Wolf analyzed more than 400 incidents abusing Microsoft Teams external chat, with payload execution in under 15 minutes after a victim engaged. It published its report Oct 26, 2026. - 05
CVEHighPHPPHP flaws could run code after CISA added two CVEs to KEVCISA added CVE-2026-109618 and CVE-2026-109619 to its KEV Catalog on Oct. 26, 2026, citing unauthenticated remote code execution in PHP.