Security Advisories: Exploited Vulnerabilities and Threats
Skip to content

Security Advisories

Advisories from the ThreatDefence SOC on vulnerabilities and incidents that need action now: what is affected, how to check your environment, fixed versions, indicators and the steps to take, in order. Each one is published early and updated as facts firm up.

Latest advisory
GitLab CVE-2026-97229 RCE: CISA KEV Threat Hunting Guide
SeverityCritical
ProductGitLab Community Edition and Enterprise Edition (CI/CD regular expression handling)
PublishedOctober 31, 2026
CVEsCVE-2026-97229
Read the advisory ›

All Security Advisories

Severity
Year
CriticalActiveOctober 31, 2026

GitLab CVE-2026-97229 RCE: CISA KEV Threat Hunting Guide

GitLab Community Edition and Enterprise Edition (CI/CD regular expression handling)

CVE-2026-97229
Read more ›
HighActiveOctober 31, 2026

Fake ChatGPT and Claude Apps: Hunting the Yoba Cryptominer

Fake ChatGPT and Claude desktop installers (Windows)

No CVE assigned
Read more ›
HighActiveOctober 31, 2026

TeamViewer CVE-2026-111585: What Your SOC Should Check Now

TeamViewer Full Client, Portable and Host before 15.83 (Windows, Linux, macOS) and the Android Remote Control app

CVE-2026-111585, CVE-2026-92372, CVE-2026-92374
Read more ›
HighActiveOctober 31, 2026

WordPress 7.1.4 Upgrade-Window RCE: Hunting CVE-2026-119977

WordPress Core 4.7 through 7.1.3 (core update process)

CVE-2026-119977
Read more ›
CriticalUpdatedOctober 30, 2026 · Updated October 31, 2026

Malicious Claude Code Extension in the Cursor Marketplace: Check Developer Machines

Claude Code extension 2.1.312 and 2.1.313 from the Cursor VS Code Extension Marketplace (macOS and Windows)

No CVE assigned
Read more ›
CriticalUpdatedOctober 21, 2026 · Updated October 31, 2026

Critical PHP Vulnerabilities Require Immediate Patching

PHP runtime (PHP-FPM, mod_php, php-cgi, FrankenPHP, LiteSpeed)

CVE-2026-109618, CVE-2026-109619
Read more ›
HighUpdatedOctober 16, 2026 · Updated October 18, 2026

ConnectWise Cloud Backup Incident: What to Check in Your Microsoft 365 Tenant

ConnectWise Cloud Backup (formerly SkyKick) for Microsoft 365

No CVE assigned
Read more ›

Have questions?

Talk with one of our experts today.

Contact us