Weekly briefing · 2 Nov–8 Nov 2026
The week's 10 most important stories
The 10 most severe of 28 stories from 6 daily briefings (all 28: 11 critical, 4 high, 13 medium).
- Critical ABB IPEC iSM Local Server has flaws in PHP and NTFS-3G Known exploited
- Critical Known-exploited PHP flaws hit Festo Didactic and WAGO products Known exploited
- Critical Patched Zyxel GS1900 switches still open to exploit used in attacks Known exploited
- Critical SonicWall VPN flaw exploited and added to CISA's known-exploited list Known exploited
- Critical Maximum-severity Node-RED flaw exploited to install Linux malware
- Critical SonicWall will not patch two flaws in end-of-life management software
- Critical Subnet Solutions PowerSYSTEM Center has flaws allowing SQL commands and admin access
- Critical Hackers remotely change freezer settings at European supermarkets
- Critical Internet-connected freezers and cold chain systems are becoming a cyber target
- Critical Cyber-attack on French blood service supplier overheats blood cold rooms