Weekly briefing · 26 Oct–1 Nov 2026
The week's 10 most important stories
The 10 most severe of 19 stories from 7 daily briefings (all 19: 7 critical, 5 high, 7 medium).
- Critical ABB gateway and NAM products hit by PHP flaws now listed as exploited Known exploited
- Critical Two Ivanti Connect Secure flaws exploited in the wild, CISA warns Known exploited
- Critical PHP 'php2shell' flaws now listed as known exploited; Siemens still assessing products Known exploited
- Critical METTLER TOLEDO Octo Image Server also hit by PHP 'PHP2Shell' flaws Known exploited
- Critical Mitsubishi Electric ICONICS and GENESIS software has flaws allowing code execution and login bypass Known exploited
- Critical Siemens lists products affected by Node.js Brotli flaw 'Node2Shell' Known exploited
- Critical EPICS Base has four flaws, including possible remote code execution
- High State-linked group exploits Cisco SD-WAN flaw to plant KeyDrift backdoor Known exploited
- High Hitachi Energy CoreTec flaws allow full device control by authenticated users
- High Warlock ransomware group hit a water utility, likely through SharePoint