Executive Summary

FoxTerm Security Intel

October 17, 2026

Vulnerability (15)

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory — A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks — The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Inde

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks — NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. Th

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing — Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution,

Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules — Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation — Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulne

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts — Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allo

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches — Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop we

Thermo Fisher Torrent Suite Software — View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. The following v

J4Care dcm4che — View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient informati

Guangzhou Juan IoT Technology EseeCloud — View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The following ver

Eclipse Foundation Eclipse Milo — View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impe

CISA Adds One Known Exploited Vulnerability to Catalog — CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-2

CISA Malcolm — View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm Malcolm <=v26.08.0 (CVE-2026-107333,

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers — Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (ri

Malware (2)

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More — Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early — Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258

Data Breach (1)

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories — The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The sp

Server Security (1)

Fake Arch Linux packages push malware with root privileges — A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]

*Total 19 security intelligence items, auto-collected by FoxTerm*

Trend Topics

Vulnerability 15

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory; Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks; NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks; Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing; Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules; Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation; Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts; AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches; Thermo Fisher Torrent Suite Software; J4Care dcm4che; Guangzhou Juan IoT Technology EseeCloud; Eclipse Foundation Eclipse Milo; CISA Adds One Known Exploited Vulnerability to Catalog; CISA Malcolm; Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Malware 2

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More; Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

Data Breach 1

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

Server Security 1

Fake Arch Linux packages push malware with root privileges

All Items (19)

The Hacker News 04:24

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape,

FoxTerm Security Intel Daily

Security Intel Report — 2026-10-15