THREAT HORIZON

Linux Kernel TCP Bug Opens Path to Remote Root

CVE-2026-98432, a use-after-free race in the kernel’s IPv4 TCP connection setup, carries a 9.8 score from the kernel CVE team, though Red Hat, SUSE, Amazon and Oracle rate it lower (5.9–8.1). Anthropic, whose researcher reported it, says its AI model built a working root exploit against servers running a multipath TCP listener.

Host takeaway: Ubuntu and RHEL fixes hadn’t landed as of Oct 29 — watch for kernel updates and reboot when they arrive.

Trojanized Claude Code Extension Slips Into Cursor Marketplace

A tampered build (v2.1.313) of the Claude Code extension was distributed through Cursor’s marketplace under the legitimate publisher name, attempting to plant a persistent SSH backdoor. Cursor says up to 5,000 users may be affected and briefly took its marketplace offline to pull it. Anthropic did not create the malicious version.

If you use Cursor, check installed extension versions and audit ~/.ssh/authorized_keys.

Binance Incident Hits $6.3 Billion in Assets

The world’s largest crypto exchange says roughly $3B has been frozen on-chain, with Tether, Circle and the Arbitrum Security Council all stepping in. Early findings point to a compromised DevOps engineer’s laptop used to reach a service container and push unauthorized withdrawals. Binance says no private keys leaked and it will cover losses.

GitLab RCE (CVSS 10) and Cisco Firewall DoS Join KEV

CISA flagged CVE-2026-97229, a GitLab CE/EE flaw letting unauthenticated attackers run code through a crafted regex in CI/CD config, plus CVE-2026-76418, which can force Cisco ASA and FTD firewalls to reload. Both are being exploited in the wild.

Drupal Commerce Core Access Bypass Under Attack

CVE-2026-118539 lets attackers slip past authorization on certain Commerce Core routes and fields — potentially costing store owners money. Affected: versions up to 2.41 and 3.0.0–3.3.13. Drupal confirms active exploitation; upgrade to the latest 3.x release.

Ivanti Connect Secure Exploit Chain Grants Root

CISA added two more Ivanti ICS flaws to KEV. Volexity found them chained with an authentication bypass (CVE-2026-104935) by a new actor it calls UTA0576, turning three moderate bugs into unauthenticated root access.

Chainalysis Breached by AI-Driven Intruder

The blockchain analytics firm says an outside actor using agentic AI techniques got into internal tools and viewed customer names, emails, user IDs and role labels. Investigation data, credentials and session tokens were not touched.

Vapor Panda Aims AI Pen-Test Tool at 200+ Targets

CrowdStrike reports the China-linked group (overlapping with Earth Estries) has used ARTEX, a Go-based AI penetration framework, since Oct 17 against organizations worldwide, including foreign ministries. Agentic tooling lets a small team work a much wider target list.

Booby-Trapped ChatGPT Share Links Could Read Private Chats

Researchers at Parameter showed a crafted shared conversation could run attacker code in a victim’s logged-in session — eventually with just a single click to open it. OpenAI patched it eight days after the Oct 18 report and rated it top priority.

TeamViewer Flaw Lets the Host Attack the Viewer

CVE-2026-111585 (8.8) flips the usual risk: a malicious machine you connect to can crash your TeamViewer client and, on some platforms, run code on your computer. Update desktop and Android clients to 15.83.

Trezor Wallet Found With Suspected Spy Implant

A customer reports a Trezor Safe 5 bought via reseller CryptoBilis contained an extra board with a cellular modem that leaks the recovery phrase. Trezor hasn’t examined it yet but advises anyone who bought from that reseller since March 2026 to move funds to a fresh wallet.

Cloudflare: Network DDoS Up 38% in Q3

Cloudflare mitigated 18.2 million network-layer attacks last quarter — nearly 197,000 a day — driven largely by DDoS-for-hire services. Short, low-bandwidth bursts more than tripled, while massive 1 Tbps+ floods dropped sharply.

Short bursts slip past slow alerting. Keep sites behind an always-on proxy, not on-demand mitigation.

Syrian Electronic Army Hacker Gets 42 Months

Ahmad Umar Agha (“Th3Pr0”) was sentenced for his part in the group’s campaign against Western media — including the 2013 hijack of the AP’s Twitter account, whose fake White House explosion report briefly wiped $136B off the market.