CISA Puts PolyShell and Node2Shell on Its Must-Patch List
CISA added Adobe Commerce's PolyShell and the Brotli Node2Shell bug to its exploited-vulnerabilities list, due Nov. 10, as ELLIO logged the first Node2Shell exploit traffic.
The Roundup
Security news from around the web with our take: what happened, what it means for you, and what defenders should do. We link every original story.
2 stories match your filters.
CriticalCVE-2026-0257CVE-2023-27532 5 Hunt LeadsIOCsRemote AttackerQilinINC RansomQilinINC RansomThe Hacker News
Qilin and INC Ransomware Slip Past MFA Through Unpatched PAN-OS
Unit 42 says the Qilin and INC ransomware groups are using CVE-2026-0257, a GlobalProtect authentication bypass patched in May, to open VPN sessions without MFA and then move on to vCenter, ESXi and Veeam.