https://www.pk-sharma.com/briefing/australia-asd-amadey-backend-180000-computers-disconnected-no-date-or-method P.K. Sharma en 2026-10-29T21:28:17Z ASD tells ABC it disconnected an Amadey controller from 180,000 computers; no date or method published https://www.pk-sharma.com/briefing/florida-department-of-education-data-breach-4-9-million-people P.K. Sharma en 2026-10-29T21:25:07Z Florida Department of Education says aid website breach may affect 4.9 million; route and window not stated https://www.pk-sharma.com/briefing/general-motors-settles-36-states-driver-data-220-million-fine-reforms P.K. Sharma en 2026-10-29T21:24:00Z GM to pay $220 million to 36 attorneys general over alleged OnStar and Smart Driver data sales, no admission https://www.pk-sharma.com/briefing/cisa-kev-gitlab-cve-2026-97229-unauthenticated-code-execution-what-the-listing-changes P.K. Sharma en 2026-10-29T21:22:40Z CISA lists GitLab CVE-2026-97229 as exploited: three days and forensic triage for federal agencies https://www.pk-sharma.com/briefing/forever-security-embrace-ai-assistant-embedded-browsers-codex-vscode-unfixed P.K. Sharma en 2026-10-29T18:46:10Z Forever Security says Codex and VS Code browsers can still read the disk; Cursor, Copilot, Claude Desktop hit https://www.pk-sharma.com/briefing/mistral-large-4-le-chonk-open-weights-one-trillion-parameters-what-it-takes-to-run P.K. Sharma en 2026-10-29T18:43:38Z Mistral Large 4 weights: 1.06 TB at FP8, about 52 GB read a token, and a cyber lead its chart lacks https://www.pk-sharma.com/briefing/linux-kernel-tcp-flaw-cvss-9-8-ubuntu-red-hat-patch-state P.K. Sharma en 2026-10-29T18:40:44Z CVE-2026-98432 Linux TCP flaw: 9.8 per kernel CNA, 8.1 on Red Hat's page, and no Ubuntu or RHEL fix listed https://www.pk-sharma.com/briefing/yoba-malware-fake-chatgpt-claude-desktop-apps-signed-executables-crypto-miner P.K. Sharma en 2026-10-29T18:38:36Z Check Point: Yoba malware hid behind genuine signed OpenAI and Anthropic files in fake ChatGPT and Claude apps https://www.pk-sharma.com/briefing/belgium-federal-tax-agency-cyberattack-services-offline-before-filing-deadline P.K. Sharma en 2026-10-29T18:37:01Z Belgium's FPS Finance says MyMinfin attack leaked no data; deadline for some returns now 16 November https://www.pk-sharma.com/briefing/virtualine-bulletproof-hosting-domain-seized-justice-department P.K. Sharma en 2026-10-29T11:39:55Z Virtualine domain seized, but the Justice Department says the bulletproof host still serves a flagged site https://www.pk-sharma.com/briefing/ico-reprimand-staffordshire-police-domestic-abuse-data-breach P.K. Sharma en 2026-10-29T11:39:17Z ICO reprimands Staffordshire Police: a domestic abuse notice gave the victim's address to the alleged abuser https://www.pk-sharma.com/briefing/palo-alto-php2shell-exploited-pan-os-management-interface P.K. Sharma en 2026-10-29T11:38:45Z Palo Alto says PHP2Shell flaw CVE-2026-109618 is now exploited against exposed PAN-OS management interfaces https://www.pk-sharma.com/briefing/irhythm-data-breach-8-2-million-hhs-zio-third-party-applications P.K. Sharma en 2026-10-29T11:38:07Z iRhythm, maker of Zio monitors, tells HHS 8,179,772 people were hit; letters came 116 days after detection https://www.pk-sharma.com/briefing/cisco-talos-nik-c2-ai-command-and-control-openai-api P.K. Sharma en 2026-10-29T11:37:28Z Cisco Talos: NIK C2 implant calls OpenAI from the victim's PC and can spend the victim's own API key https://www.pk-sharma.com/briefing/symantec-ai-relay-codex-claude-code-sandboxes-disabled P.K. Sharma en 2026-10-29T11:36:44Z Symantec: grey market relay reroutes real OpenAI Codex and Claude Code at a dozen organisations, sandbox off https://www.pk-sharma.com/briefing/nist-ir-8547-final-deprecates-rsa-ecc-after-2030-five-days-after-agency-pqc-plans-due P.K. Sharma en 2026-10-29T11:34:34Z NIST's final IR 8547 deprecates all RSA and ECC after 2030, five days after US agency PQC plans were due https://www.pk-sharma.com/briefing/cisco-talos-keydrift-uat-11473-sd-wan-cve-2026-20127 P.K. Sharma en 2026-10-29T11:34:04Z Cisco Talos says UAT-11473 used CVE-2026-20127 to plant KeyDrift, malware built to collect Cisco SD-WAN keys https://www.pk-sharma.com/briefing/cisco-asa-ftd-cve-2026-76418-ssl-vpn-zero-day-reload P.K. Sharma en 2026-10-29T11:32:25Z Cisco says ASA and FTD SSL VPN flaw CVE-2026-76418 was exploited, and lists August's fixed builds as affected https://www.pk-sharma.com/briefing/vmware-esx-cve-2026-41709-low-rated-logging-flaw-cisa-kev P.K. Sharma en 2026-10-28T21:36:48Z CISA lists VMware ESX CVE-2026-41709, rated Low by Broadcom, as exploited; CrowdStrike says it was a zero day https://www.pk-sharma.com/briefing/peoplesoft-cve-2026-35273-three-vulnerabilities-zdi-shinyhunters P.K. Sharma en 2026-10-28T21:35:00Z ZDI says Oracle's PeopleSoft CVE-2026-35273 covers three separate bugs, and Oracle's alert names one component https://www.pk-sharma.com/briefing/pwn2own-paid-175000-edge-sandbox-escape-author-says-five-logic-bugs-no-memory-corruption P.K. Sharma en 2026-10-28T19:06:01Z Pwn2Own paid $175,000 for an Edge sandbox escape its author says used five logic bugs and no memory corruption https://www.pk-sharma.com/briefing/123-reg-says-ai-driven-attack-read-customer-data-china-nexus-evidence-is-servers-and-tools P.K. Sharma en 2026-10-28T19:03:30Z 123 Reg says an "AI-driven" attack read customer data and cites a China nexus; the evidence given is servers… https://www.pk-sharma.com/briefing/tianocore-edk2-pxe-flaw-2010-code-runs-before-secure-boot-no-stable-fix P.K. Sharma en 2026-10-28T19:02:56Z TianoCore says a PXE flaw in EDK II code dating to 2010 can run code before Secure Boot; no stable fix https://www.pk-sharma.com/briefing/volt-typhoon-silent-train-four-confirmed-zero-days-relay-chains-no-indicators-lumen P.K. Sharma en 2026-10-28T19:02:19Z Lumen says Volt Typhoon ran four confirmed zero day campaigns through disposable relay chains and prints no… https://www.pk-sharma.com/briefing/google-gemini-4-carbon-leads-15-of-17-rows-vals-second-no-carbon-safety-report P.K. Sharma en 2026-10-28T19:00:25Z Google's Gemini 4 Carbon table leads 15 of 17 rows; Vals ranks it second and no Carbon safety report is linked https://www.pk-sharma.com/briefing/adobe-campaign-classic-build-9403-fixes-8-critical-flaws-apsb26-162-after-36-earlier-records P.K. Sharma en 2026-10-28T18:59:12Z Adobe says build 9403 fixes eight critical Campaign Classic flaws, after 36 earlier records since June https://www.pk-sharma.com/briefing/sony-so-net-breach-2585481-records-16-bank-accounts-no-count-of-people P.K. Sharma en 2026-10-28T18:58:36Z Sony's So-net says 2,585,481 records leaked, 16 with bank account details, and gives no count of people https://www.pk-sharma.com/briefing/google-registered-app-stores-one-tap-installs-1-december-139-listed-regions-not-us P.K. Sharma en 2026-10-28T18:57:26Z Google says registered Android app stores get one tap installs from 1 December in 139 listed regions, not… https://www.pk-sharma.com/briefing/dream-reports-php2shell-kernel-chain-rooted-25-servers-three-in-us-government-affiliated-network P.K. Sharma en 2026-10-28T18:56:49Z Dream says a chained PHP2Shell and kernel exploit rooted 25 servers, three in a US government affiliated… https://www.pk-sharma.com/briefing/oracle-ebs-cve-2026-101767-defused-says-decoys-hit-7-days-after-patch-no-real-compromise-stated P.K. Sharma en 2026-10-28T18:55:58Z Defused says its decoys logged exploit attempts at Oracle EBS CVE-2026-101767 7 days after the patch https://www.pk-sharma.com/briefing/skyw4lker-device-code-phishing-kit-618-sandbox-analyses-anyrun-counts-no-victims P.K. Sharma en 2026-10-28T18:53:48Z ANY.RUN says its SkyW4lker device code phishing kit appears in 618 sandbox analyses, and counts no victims https://www.pk-sharma.com/briefing/anthropic-five-attack-chains-unreleased-model-chrome-credits-28-of-62 P.K. Sharma en 2026-10-28T09:36:19Z Anthropic says an unreleased model built five attack chains; Chrome's notes label 28 CVEs as its, the post… https://www.pk-sharma.com/briefing/openai-executive-maintainers-cannot-answer-hundreds-of-ai-bug-reports-quality-clarity-coordination P.K. Sharma en 2026-10-28T09:34:40Z OpenAI executive says maintainers cannot answer hundreds of AI bug reports; its pages print no advice for… https://www.pk-sharma.com/briefing/gmo-says-up-to-26739-fx-trading-servers-may-be-affected-ransomware-threatened-not-confirmed P.K. Sharma en 2026-10-28T09:32:05Z GMO says up to 26,739 FX trading servers may be affected and ransomware is threatened, not confirmed https://www.pk-sharma.com/briefing/liquid-ai-lfm3-table-2-13-point-lead-rests-on-one-evaluation-licence-caps-commercial-use-at-10m-revenue P.K. Sharma en 2026-10-28T08:30:05Z Liquid AI's table puts LFM3-1.7B 2.13 points ahead via one evaluation; licence bars commercial use above…