CVE-2026-111497, the Brotli decompression bug behind yesterday's emergency patches, is now on CISA's Known Exploited Vulnerabilities list. Wiz says 91% of cloud environments have vulnerable resources, so patch Node.js, Python and .NET runtimes now.
Attackers pair CVE-2026-109618/109619 with the Fragnesia kernel flaw (CVE-2026-46300) for root on Palo Alto firewalls; researchers found about 19,000 exposed devices and root webshells on 24. Patch and pull management interfaces off the internet.
Sansec counts 953 compromised Adobe Commerce/Magento stores via CVE-2026-48356. Store owners should patch and check for planted skimmers and unexpected uploaded files.
Major OS vendors are pulling trust for the affected eMudhra certificates, but Linux distro, Homebrew and Python certifi trust bundles may lag. Update CA bundles on servers and build images.
CVE-2026-80097 let a malicious app on the same phone obtain Authenticator's tokens. It's fixed in version 6.2606.4246; make sure managed Android fleets are updated.
About 166.8 ETH went to Tornado Cash after owner keys were used to drain user funds. The team blames a hacked API docs site and promises refunds.
The former DotSwap lost about $685K via a deprecated signature path that was still live. A reminder to fully shut down old infrastructure, not just stop advertising it.
The Kingdom Come: Deliverance studio confirmed a cybersecurity incident but hasn't said what was affected. Watch for phishing that uses the news as a lure.
OSV-Scanner · Apache-2.0 license
OSV-Scanner, from Google, checks your project's dependencies, lockfiles and container images against the open OSV vulnerability database and tells you which packages need updating. It's for developers and security teams who want a free way to catch issues like this week's Brotli flaw in their own code.