ITSECURITY.GURU WHAT HAPPENED · DOES IT AFFECT YOU · WHAT TO DO
Search Contact
Menu
Search Contact
Board › Newsletters › Past editions › ITsecurity Daily — Monday, 2 November 2026: Max-severity OT bug under active exploitation, plus two exploited Ivanti flaws added to CISA's KEV

ITSECURITY.GURU

ITsecurity Daily

Daily Briefing

Max-severity OT bug under active exploitation, plus two exploited Ivanti flaws added to CISA's KEV

By The IT Security Desk

Good morning. The Register reported that a max-severity bug in a widely used OT programming tool is being exploited to deliver Linux malware. The Register's framing points at industrial IoT gateways. Treat any internet-reachable OT engineering or programming workstation as in scope, isolate it from general network access, and watch for unexpected Linux binaries or outbound connections from OT hosts.

Help Net Security reported that CISA added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an earlier advisory, and that flaws were chained to gain a foothold. If you run Ivanti Connect Secure, apply Ivanti's fixed release per its advisory and hunt for signs of exploitation now; CISA's listing means these are being used in the wild.

Google's advisory lists several high-severity Chrome fixes. Google lists CVE-2026-119263 and CVE-2026-119261, both CVSS 9.6, as fixed in Chrome 156.0.8078.79. Google separately lists CVE-2026-118355, CVE-2026-118342 and CVE-2026-118340 at CVSS 9.6, plus CVE-2026-118337 at CVSS 9.3, as fixed in Chrome 156.0.8078.73. All are network-reachable and require user interaction. Update Chrome to the listed builds and confirm your fleet has restarted to apply them.

Read the full briefing →

Zoom out: BleepingComputer reported Chinese hackers used ARTEX, an open-source multi-agent AI penetration-testing framework, against more than 200 organizations across 14 countries, while Schneier on Security flagged a surge in AI-driven vulnerability discovery.

Vulnerability in focus

CVE-2026-119263 — Google. CVSS 9.6

Affected: chrome.

What to do: Follow the vendor advisory for the fixed release and any interim mitigation.

Elsewhere

  • Help Net Security: What human hackers still do better than AI, according to HackerOne’s CEO Read it
  • Help Net Security: Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up Read it
  • Help Net Security: AI coding agents are installing MCP servers that will never be patched Read it
  • Help Net Security: Fireperf: Open-source network testing tool for firewalls and routers Read it
  • The Hacker News: Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials Read it
  • The Hacker News: Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors Read it
  • Help Net Security: Cybersecurity jobs available right now: November 3, 2026 Read it
  • The Record: UK faces ‘unprecedented rise’ in cyberattacks in coming months, warns cyber chief Read it
  • NCSC: Artificial intelligence and cyber intrusion Read it
  • The Register: Max-severity bug in widely used OT programming tool exploited to deliver Linux malware Read it
  • The Record: Largest crypto exchange in Brazil confirms cyberattack as millions flow out of platform Read it
  • BleepingComputer: Chinese hackers use ARTEX AI in automated attacks against 200 orgs Read it

Sources

Every briefing is on the site, with the advisory record behind it. All briefings

itsecurity.guruPast editions

You are receiving this because you subscribed at itsecurity.guru.

Headlines from other outlets belong to them; each one credits its outlet and leads to their own report.

All past editions · Get them by email