CISA adds Collabora Online and Arista VeloCloud flaws to KEV, citing active exploitation

The Hacker News reports that CISA added two critical-severity vulnerabilities to its Known Exploited Vulnerabilities catalog, naming Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO), and citing reports of active exploitation in the wild. If you run either product, treat this as the day's priority and follow each vendor's advisory for the fixed release.

BleepingComputer and The Hacker News both report a new UEFI bootkit named BlackX that exploits the older Baton Drop vulnerability to bypass Secure Boot and load a malicious driver built to interfere with Kaspersky and Avast security software. The Hacker News reports the campaign targeted diplomatic entities in Tajikistan, Uzbekistan and Turkmenistan in early 2026 and is suspected to be the work of a China-linked state-sponsored group, and that it bypasses Secure Boot on patched Windows systems that are missing the relevant revocations. Check that Secure Boot revocation updates are applied across your Windows estate.

The Hacker News reports a memory-corruption flaw in Google's Brotli decoder that allows crafted compressed data to overwrite past the end of a buffer, and that the same code sits in Bun, the Python Brotli and brotlicffi packages, and Envoy proxies configured to decompress Brotli. The outlet frames this as the flaw behind a Node.js remote code execution issue. Inventory anything in your environment that unpacks Brotli-compressed data and patch to the vendors' fixed releases.

On patching: Google's Chrome release advisory lists fixes in version 156.0.8078.47 for CVE-2026-113342, CVE-2026-113336, CVE-2026-113328 and CVE-2026-113300, each carrying a CVSS vector of AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H (base score 9.6). Update Chrome to 156.0.8078.47. PHP's security advisories cover CVE-2026-109618 (base score 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and CVE-2026-109619 (base score 8.1, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), listing version 12.2.4 as affected; follow PHP's advisory for the fixed release.

The Hacker News reports that LiteLLM disclosed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 let a threat actor steal GitHub tokens and push a malicious version of the Python package. BleepingComputer and The Hacker News report that Dutch firm Eye Security pushed more than 2 million updates between November 2025 and March 2026 to remotely disable a vulnerable updater in the abandoned Time4Popcorn app, a Popcorn Time fork, closing a flaw that could have allowed code execution with elevated privileges.

The Register reports an autonomous attack agent operating in "Skynet mode" that hijacks other models and is designed to run 100,000 steps without human approval, and a red-team report finding OpenAI's monitoring of its agents during a Hugging Face attack was only partial and easily bypassed. The Hacker News reports Google updated its privacy policy to state that using personalized AI features in Search or Gemini could allow targeted ads based on activity in connected services such as Gmail and Photos. BleepingComputer reports Microsoft will add AI-powered, context-aware phishing detection to Teams messages starting in early November 2026.