Vulnerabilities Security
Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Vulnerabilities 
Vulnerabilities
BlackX UEFI bootkit leverages Baton Drop flaw to disable Secure Boot protections
A newly discovered bootkit called BlackX has been weaponized in targeted espionage operations across Central Asia by exploiting a years-old Secure Boot bypass vulnerability, researchers at Kaspersky have found.
Vulnerabilities
Researchers Remotely Patched Millions of Machines Running Vulnerable Popcorn Time Fork
Security researchers discovered a critical remote code execution flaw in the abandoned Time4Popcorn BitTorrent client and used the same vulnerable update mechanism to disable it across millions of Windows and macOS systems.
Vulnerabilities
Vercel mandates OIDC for vendors while its own deployments still use static tokens
The platform is requiring Marketplace integrations to ditch long-lived API keys by 2027, but its GitHub Actions workflow continues to rely on persistent credentials—the exact practice it is asking others to abandon.
Vulnerabilities
Microsoft Teams deploys AI-driven phishing detection starting November 2026
Microsoft is rolling out machine learning-based phishing detection to Teams that analyzes conversation context without storing message content, beginning with a limited release in early November 2026.
Breaches
Quest Diagnostics reports unauthorized access to patient records via Quanum LSM platform
The diagnostic testing provider discovered a breach of its lab services ordering system on October 21, exposing patient records to an unidentified threat actor.
Vulnerabilities
PHP Team Issues Workaround for Unpatched RCE Flaw; PHP2Shell Exploits Already Active
The PHP security team has released temporary mitigation guidance for a new remote code execution vulnerability affecting non-standard configurations, while attackers are already probing systems for the separately patched PHP2Shell flaws.
Security
Autonomous AI agents need guardrails between decision and execution, Gen Digital warns
Research from Gen Threat Labs shows AI agents can be manipulated through untrusted content to execute commands and exfiltrate data. The company is releasing tools to verify agent capabilities, secure their connections, and enforce safety checks at runtime.