📡 IT SecOps News — October 30, 2026
Daily IT SecOps, vulnerability, patch, and security news briefing. Sources monitored: 17 feeds across Microsoft, CISA, security news, and IT communities
🚨 High Alerts & Active Exploits
Critical vulnerabilities, zero-days, active exploits in the wild, and emergency advisories requiring immediate IT SecOps attention.
| Priority | Title | Source | Advisory / Link |
|---|---|---|---|
| 🔴 HIGH | Malicious Claude Code extension on Cursor planted SSH backdoors | BleepingComputer | Read News Article → |
| 🔴 HIGH | WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours | The Hacker News | Read News Article → |
| 🔥 ACTIVELY EXPLOITED | CISA says max severity GitLab flaw now exploited in the wild | BleepingComputer | Read News Article → |
| 🔥 ACTIVELY EXPLOITED | Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorizat… | The Hacker News | Read News Article → |
| 🔴 HIGH | CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV | The Hacker News | Read News Article → |
| 🔴 HIGH | Hugging Face malware campaign returns to hijack GPUs for crypto mining | BleepingComputer | Read News Article → |
| 🔴 HIGH | Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware | BleepingComputer | Read News Article → |
| 🔴 HIGH | Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Ot… | The Hacker News | Read News Article → |
Malicious Claude Code extension on Cursor planted SSH backdoors
Source: BleepingComputer · Published: October 30, 2026 at 02:36 PM UTC · 🔗 Direct Link to Article / Advisory
A malicious version of Anthropic’s Claude Code VS Code extension was distributed through Cursor’s extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. […]
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
Source: The Hacker News · Published: October 30, 2026 at 02:08 PM UTC · 🔗 Direct Link to Article / Advisory
Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates to a case of remote code execution impacting WordPress Core versions 4.7 through 7.1.3. It carries a CVSS score of 8.1 on the CVSS scoring sys…
🔥 [ACTIVELY EXPLOITED / ZERO-DAY] CISA says max severity GitLab flaw now exploited in the wild
Source: BleepingComputer · Published: October 30, 2026 at 01:00 PM UTC · 🔗 Direct Link to Article / Advisory
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). […]
🔥 [ACTIVELY EXPLOITED / ZERO-DAY] Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Source: The Hacker News · Published: October 30, 2026 at 07:45 AM UTC · 🔗 Direct Link to Article / Advisory
🛡️ CVE: CVE-2026-118539 (CVE.org) · (NVD) Drupal has warned that threat actors are exploiting a “highly critical” security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13. “This module enables you to sell goods and services…
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Source: The Hacker News · Published: October 30, 2026 at 07:27 AM UTC · 🔗 Direct Link to Article / Advisory
🛡️ CVE: CVE-2026-97229 (CVE.org) · (NVD) The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-97229 (CVSS score: 10.0) - An integer overflow or wraparound vulnerability …
⚠️ Bad Updates & Known Issues
Reports of problematic updates, broken KBs, OS regressions, and patches causing issues.
No problematic update reports detected today.
📅 Upcoming Changes & Deprecations (14-Day Horizon)
Upcoming security changes, feature retirements, and deadlines on the horizon.
-
📆 In development - Microsoft Intune — Microsoft Intune What’s New · Read Announcement → In development for Microsoft Intune Summarize this artic… Applies to: Windows Automate tasks with local actions on Android Enterprise devices Microsoft Intune will introduce local actions for Android Enterprise fully managed and dedicated devices. Applies to: Android Enterpr…
-
📆 Dynamics 365 Supply Chain Management: Enable fulfillment optimization in Dynamics 365 Supply Chain Management — Microsoft 365 Roadmap · Read Announcement → Distributed order management (DOM) can now optimize fulfillment for standard sales orders in Dynamics 365 Supply Chain Management. Previously, DOM was available only for Dynamics 365 Commerce orders. Now you can use the same rules-based fulfillment engine to automatically choo…
-
📆 Dynamics 365 Supply Chain Management: Check margins when overriding prices in Unified pricing management — Microsoft 365 Roadmap · Read Announcement → Price override allows sales representatives to adjust the preset price of a product during a transaction—typically for business purposes such as customer negotiations and retention. Previously, price override validation only enforced amount-based thresholds, without evaluating…
-
📆 Dynamics 365 Finance: Enhance positive pay file generation through batch processing — Microsoft 365 Roadmap · Read Announcement → This feature improves the scalability and performance of positive pay file generation by enabling the process to run as a background batch job. Organizations that generate large positive pay files can now offload processing from the interactive user session, reducing the risk …
-
📆 Microsoft Copilot Studio: Copilot studio cost controls in MAC — Microsoft 365 Roadmap · Read Announcement → We’re expanding cost management for Microsoft Copilot Studio into the Microsoft 365 admin center. This gives administrators a more centralized way to manage Copilot Credit spend across usage-based AI workloads while retaining Copilot Studio cost management capabilities in the …
-
📆 Dynamics 365 Sustainability: Enhance external sustainability reporting — Microsoft 365 Roadmap · Read Announcement → This feature delivers enhancements to the external reporting experience with an improved standards and assessments structure and enhanced search capabilities. Users can navigate standards, assessments, and concepts more efficiently, reducing time spent locating and managing re…
-
📆 Microsoft Viva: Network analytics enhancements — Microsoft 365 Roadmap · Read Announcement → Network analytics updates are rolling out in Microsoft Viva Engage, giving corporate communicators and network admins more flexibility to analyze activity and engagement across their organization. With this update, network analytics includes custom date ranges, faster activity…
-
📆 Microsoft Contact Center Intelligence: Biometric authentication — Microsoft 365 Roadmap · Read Announcement → Voice biometric authentication delivers business value by reducing fraud and agent operating costs in contact centers. Voice-based verification improves identity assurance shortens call durations reduces customer service rep effort and enable secure self-service transactions. …
-
📆 Dynamics 365 Customer Service: Shared analytics foundation for historical reporting — Microsoft 365 Roadmap · Read Announcement → Dynamics 365 Customer Service provides out-of-the-box historical reporting built on a shared analytics foundation: a scalable, open, and AI-ready data foundation for Customer Experience and AI analytics scenarios across Dynamics 365. It uses a lakehouse-based architecture that…
-
📆 Dynamics 365 Business Central: Expense Agent - Create expenses from credit card feeds — Microsoft 365 Roadmap · Read Announcement → Expense Agent now supports creating expenses from imported credit card transaction feeds or automatically reconcile with them if the expense was created earlier. Key capabilities include: Import credit card transaction data and review it in the web and mobile apps. Automatical…
✅ Official Updates & Security Advisories
Feature announcements, security blogs, and official releases.
-
Enrollment for Microsoft Entra hybrid joined devices - Windows Autopilot — Microsoft Intune What’s New · Read Article → Deploy Microsoft Entra hybrid joined devices by using Intune and Windows Autopilot Summarize this article for me In this article Important Microsoft recommends deploying new devices as cloud-native using Microsoft Entra join. Intune and Windows Autopilot can be used to set up …
-
Tracking AI adoption in North Korean threat actor tradecraft — Microsoft Security Blog · Read Article → As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified North Korean threat actors expanding their use of AI with varying levels of adoption. This blog breaks down how North Korea…
-
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment — Microsoft Security Blog · Read Article → IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The post IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment appeared first on Microsoft S…
🐛 IT SecOps Community Buzz
What IT SecOps teams and sysadmins are discussing today.
- TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them — The Hacker News · View Thread →
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the vie…
- SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone — BleepingComputer · View Thread →
Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how…
- Drupal warns of critical Commerce Core flaw exploited in attacks — BleepingComputer · View Thread →
Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. […]
- Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor — The Hacker News · View Thread →
Cybersecurity researchers have disclosed that a trojanized version of Anthropic’s official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persisten…
Generated automatically at October 30, 2026 at 04:55 PM UTC · View all IT SecOps news →