FoxTerm Security Intel

FoxTerm Security Intel Daily

Automated aggregation of public security sources into traceable intelligence reports.

Automated collection every 12 hours

Security Intel Report — 2026-11-03

Generated November 3, 2026 at 04:49 · 10 items · 4 topics · 10 new

Executive Summary

FoxTerm Security Intel

November 3, 2026

Security Industry (4)

  • Self-Employed? Solopreneur? NIST Has a Cybersecurity Guide Just for You
  • Cyberattacks hit supermarket fridges and freezers in Europe
  • New cyberattack on supermarket fridges sweeps across Europe
  • DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation — The read-only mode can be bypassed on the MySQL and MariaDB connectors. In read-only mode a caller can still execute arbitrary write and DDL statement

    • Vulnerability (3)

  • Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
  • TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
  • SD JWT JS: Tampered disclosures silently dropped instead of rejected — ## Summary When one Disclosure in an SD-JWT presentation is tampered so its digest no longer matches the Issuer-signed `_sd` array, `@sd-jwt/decode` 0

    • Network Security (2)

  • My Favourite Laptop
  • One of Google's Android partners turned 1.3M set-top boxes into a botnet

    • Malware (1)

  • Agentic backdoors via pretraining poisoning

    • *Total 10 security intelligence items, auto-collected by FoxTerm*

    Trend Topics

    Security Industry 4

    Self-Employed? Solopreneur? NIST Has a Cybersecurity Guide Just for You; Cyberattacks hit supermarket fridges and freezers in Europe; New cyberattack on supermarket fridges sweeps across Europe; DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation

    Vulnerability 3

    Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks; TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8; SD JWT JS: Tampered disclosures silently dropped instead of rejected

    Network Security 2

    My Favourite Laptop; One of Google's Android partners turned 1.3M set-top boxes into a botnet

    Malware 1

    Agentic backdoors via pretraining poisoning

    All Items (10)

    Hacker News 04:49 NEW
    Self-Employed? Solopreneur? NIST Has a Cybersecurity Guide Just for You
    Security Industry
    Hacker News 04:49 NEW
    Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
    Vulnerability
    Hacker News 04:49 NEW
    My Favourite Laptop
    Network Security
    Hacker News 04:49 NEW
    Agentic backdoors via pretraining poisoning
    Malware
    Hacker News 04:49 NEW
    One of Google's Android partners turned 1.3M set-top boxes into a botnet
    Network Security
    Hacker News 04:49 NEW
    TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
    Vulnerability
    Hacker News 04:49 NEW
    Cyberattacks hit supermarket fridges and freezers in Europe
    Security Industry
    Hacker News 04:49 NEW
    New cyberattack on supermarket fridges sweeps across Europe
    Security Industry
    GitHub Advisory 04:49 NEW
    DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation

    The read-only mode can be bypassed on the MySQL and MariaDB connectors. In read-only mode a caller can still execute arbitrary write and DDL statements (for example DROP TABLE), which defeats the protection that read-only mode is meant to provide when a database is exposed to an AI agent. Root cause

    Security Industry
    GitHub Advisory 04:49 NEW
    SD JWT JS: Tampered disclosures silently dropped instead of rejected

    ## Summary When one Disclosure in an SD-JWT presentation is tampered so its digest no longer matches the Issuer-signed `_sd` array, `@sd-jwt/decode` 0.19.0 does **not** reject the presentation. It silently drops the unmatched Disclosure and returns a **reduced claim set**, reporting success. The Iss

    Vulnerability