Zero Wire is a public vulnerability intelligence feed in the security section of Cloudflare Radar. Each briefing covers one critical CVE in Internet-facing software: who should investigate, what to do, evidence links such as the CISA Known Exploited Vulnerabilities catalog, and WAF context. Briefings include a prompt for an AI agent to run a read-only exposure assessment; the first example covers php2shell.
Cloudflare RadarCloudflareCISA KEV+1
PHP2Shell
Threat Intel, Blue Team & DetectionΒ· Published and added 3 Nov 2026
Explains how Helios and ElectionGuard use threshold-shared exponential ElGamal, zero-knowledge proofs, Benaloh challenges and hash-chained ballot commitments to protect voter privacy and give end-to-end verifiability. It covers compromised voting clients and backends, software independence, and the 2018 National Academies report against internet voting. It concludes that cryptography supplements, but cannot replace, paper ballots in general elections.
Harvard University's Alumni Affairs and Development systems were breached in November 2025, and Have I Been Pwned confirmed 850,500 accounts exposed. ShinyHunters claimed the attack and leaked a 1.1GB archive in February 2026 after Harvard refused to pay. Exposed data includes names, emails, birth dates, phone numbers, addresses and donation details, but no SSNs, passwords or payment data. The article also notes a separate Clop claim using an Oracle E-Business Suite zero-day.
Over 100 stores in Belgium, Estonia, Ireland, Luxembourg, the Netherlands and Sweden had fridges forced into defrost mode overnight on 2 to 3 November 2026, after about 700 French supermarkets were hit on 11 to 12 October. Targets were internet-exposed, often end-of-life Danfoss AK-SM/AK-SC and Copeland controllers. Censys counted about 1,000 exposed StoreView interfaces. Lupovis saw default-credential probing from 20 October.
Danfoss AK-SMDanfoss AK-SCDanfoss StoreView+2
CERT-FRANSSICensys+3
Threat Intel, Hardware & RFΒ· Published and added 3 Nov 2026
An x64dbg MCP server, published on GitHub by duty1g and shared in an X post by @0x0SojalSec, lets Claude drive the x64dbg Windows debugger. It exposes breakpoints, memory dumps and code stepping as tools for reverse engineering and malware analysis. A reply warns that debugging a sample executes it, so the agent should run in a snapshotted VM with no shared folders or host route, and every command should be logged.
Training activation classifiers for safety and alignment describes how OpenAI trains lightweight probes on a model's residual stream activations to flag misaligned or policy-violating completions. Probes use an MLP plus QV-attention architecture with an exponential moving average and a rolling softmax objective. They run in streaming mode on the inference engine, have run on all assistant completions since GPT-5.6, and transfer well across post-training checkpoints but less across pre-training checkpoints.
activation probesattention probesMultiMax probe+3
OpenAIGPT-5.6
ai-safety, researchΒ· Published and added 2 Nov 2026
BTCPay Server, an open-source self-hosted cryptocurrency payment processor, reports attackers draining hot wallets on instances running version 2.4.1 (July 23, 2026) or earlier. Attackers logged in as administrators on versions older than 2.4.2. Users should update to 2.4.7; the exploited flaw is not disclosed. An October 29 critical vulnerability found by Anthropic's Frontier OSS scanner prompted 2.4.7. The August 7 release 2.4.2 had already warned of an exploited LND credential exposure.
BTCPay ServerBitcoinLightning Network+2
Nicolas DorierAnthropicBleepingComputer
Blockchain, Threat Intel, AppSecΒ· Published and added 2 Nov 2026
The Florida Department of Education (FLDOE) disclosed a breach of its Florida Student Financial Aid website (FloridaStudentFinancialAidSG.org), discovered on 19 October and potentially affecting about 4.9 million people. Exposed data may include names, Social Security numbers, dates of birth, addresses, phone numbers and emails. The entry vector and actor are undisclosed. The article links it to the September FLHSMV driver database breach, which came from compromised police credentials.
Florida Department of EducationFlorida Department of Highway Safety and Motor VehiclesFlorida Digital Service+2
CVE-2026-97229 is a maximum-severity integer overflow in GitLab's CI/CD Regular Expression Compiler that lets an unauthenticated attacker run code via a crafted regex in pipeline configuration. GitLab patched it on 12 October 2026 in versions 19.4.2, 19.3.5 and 19.2.8. CISA added it to KEV, and Shadowserver tracks over 1,000 unpatched servers, plus 11,300 exposed to the related CVE-2026-110264.
GitLab
CVE-2026-97229CVE-2026-110264CVE-2026-85706+6
AppSec, DevSecOps, Threat IntelΒ· Published and added 2 Nov 2026
Guardian report from 2 November 2026 on a second suspected cyber-attack on supermarket refrigeration in Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands and Sweden, with temperatures set to 50C. It recaps the earlier French attack on up to 700 shops, which hit mostly Danfoss controllers. SentinelOne and Tributech say the attacks point to sabotage and that many controllers remain internet-exposed and unpatched.
DanfossSentinelOneTributech+5
Threat Intel, Hardware & RFΒ· Added 3 Nov 2026, published 2 Nov 2026
C3RB3R (Cerber) ransomware is encrypting Synology NAS devices running outdated DiskStation Manager, and Synology issued an advisory urging immediate updates. The attacks exploit a vulnerability patched in December 2024, likely among CVE-2024-10441, CVE-2024-50629 and CVE-2024-10445 from a November 2024 advisory. Victims get a read-me3.txt note and .L0CK3D extension. Shadowserver tracks over 380,000 exposed Synology NAS devices.
Chainalysis disclosed a data breach in which an external actor used offensive agentic techniques to access its systems and internal tools. Exposed data was non-sensitive customer data: user IDs, full names, email addresses and organization role labels. Investigation content, query results and credentials were not compromised. The company says the incident is unrelated to the $6.36 billion Binance heist, and advises users to enable MFA and watch for password reset prompts. Scope and victim count are undisclosed.
LLM
ChainalysisBinanceDPRK
Threat Intel, AI SecurityΒ· Published and added 2 Nov 2026
Ivanti patched two more Connect Secure zero-days, CVE-2026-111357 (privilege escalation) and CVE-2026-118527 (authenticated file upload), chained with authentication bypass CVE-2026-104935 since at least 1 October 2026. Volexity attributed the chain to UTA0576, which ran no malware, re-exploited the device per command and tampered with logs, evading Ivanti's Integrity Checker Tool. CISA added CVE-2026-104935 to KEV, and Shadowserver tracks over 5,000 exposed instances.
Ivanti Connect SecureVPN
CVE-2026-111357CVE-2026-118527CVE-2026-104935+12
Threat Intel, Offensive SecurityΒ· Published and added 2 Nov 2026
Hermes, the Nous Research agent framework, shipped 130 merged PRs in October 2026, according to this X recap by Luke The Dev. Main items are a unified gateway runtime, a Desktop and Bot Screen, a bundles and package manager, crash-safe updates and new Claude model entries. Ten PRs cover security: an iron-proxy credential-injection egress firewall for sandboxes, 31 CVEs patched in Python and npm lockfiles, and profile-export and prompt-leak fixes.
A reply by Smarthouse (@localyzapp) on X to a question about the best harness for connecting local models to a Minecraft server. It suggests an MCP server that wraps RCON plus a small agent loop. The main pitfall is block coordinates: expose "/execute if block" as a read tool so the agent can check blocks before placing them, or it will hallucinate terrain.
Model Context ProtocolMinecraftRCON
mcp, agentsΒ· Added 2 Nov 2026, published 1 Nov 2026
Chainalysis confirmed on 30 October 2026 that an external actor accessed its systems and internal tools earlier in October, using what it called "offensive agentic techniques". Exposed data covers some customers' names, emails, job titles, user IDs and role labels. Chainalysis says it has found no access to passwords, session tokens or investigation content so far, and customers should expect targeted phishing. Affected-customer counts and the exploited vulnerabilities are not disclosed.
Chainalysis disclosed a security incident in which an external actor used "offensive agentic techniques" to access internal systems and tools earlier in the month. Exposed customer data includes user IDs, names, email addresses and organizational role labels. The company reports no evidence of access to investigation content, credentials or session tokens, and has shared no details on the vulnerabilities, tools or dwell time. The article also lists other incidents from the same week.
ChainalysisBinanceARTEX+3
Threat Intel, AI SecurityΒ· Published and added 31 Oct 2026
Bunny CDN status-page notice, posted 28 October 2026, about unauthorized access at an infrastructure provider that hosted one bunny.net CDN node in Armenia. Traffic was stopped within 20 minutes and the server wiped. No access to the node was found, but cached content, Pull Zone configs and TLS certificates could have been exposed, so all platform certificates were reissued. Customers with their own certificates should rotate them with new private keys.
Bunny CDNTLS
bunny.netb-cdn.netbunny.run
Threat Intel, Cloud & InfraΒ· Added 31 Oct 2026, published 30 Oct 2026
CISA added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 30 October 2026, citing evidence of active exploitation: CVE-2026-111357 (missing authentication for a critical function) and CVE-2026-118527 (generation of predictable numbers or identifiers). The alert restates BOD 26-04, which requires federal civilian agencies to remediate KEV-listed flaws on exposed assets and check for prior compromise. It also links the KEV nomination form.
Ivanti Connect SecureCISA KEVVPN
CVE-2026-111357CVE-2026-118527BOD 26-04+1
Threat Intel, GRCΒ· Published and added 30 Oct 2026
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) has been exploited for over a week. A China-linked group chained it with the Fragnesia Linux kernel privilege escalation to root at least 25 Palo Alto Networks PAN-OS firewalls with exposed management interfaces. Defiant had seen no confirmed WordPress compromise by 28 October 2026 despite 77,000 requests, and Cato and watchTowr report few successful attackers.
PAN-OSPHPWordPress+2
CVE-2026-109618CVE-2026-109619PHP2Shell+8
Threat Intel, AppSecΒ· Published and added 30 Oct 2026
CVE-2026-97229 is a maximum-severity GitLab flaw in the CI/CD Regular Expression Compiler, caused by an integer overflow, that lets unauthenticated attackers run code via a crafted regular expression. CISA added it to the KEV Catalog and ordered federal agencies to patch under BOD 26-04. GitLab fixed it in CE/EE 19.4.2, 19.3.5 and 19.2.8, and Shadowserver tracks about 2,800 exposed CE instances.
GitLab
CVE-2026-97229CVE-2026-0723CVE-2026-110264+10
AppSec, DevSecOps, Threat IntelΒ· Published and added 30 Oct 2026
CyberForge CVE of the Day #091 covers Progress WS_FTP Server CVE-2026-84295 (unauthenticated administrator-credential exposure, CVSS 10.0) and CVE-2026-90868 (conditional OS command and argument injection, CVSS 9.9, low privileges). Fixed floors are 2024.0.7/9.0.7 and 2025.0.4/10.0.4; 2024.0.6/2025.0.3 fix only the first. It gives KEV, EPSS and SSVC status, six SOC checks, and Windows 4688 evidence queries.
WS_FTP ServerWindowsPowerShell+3
CVE-2026-84295CVE-2026-90868CWE-287+9
Blue Team & Detection, Identity & AccessΒ· Added 2 Nov 2026, published 30 Oct 2026
Anthropic security incident in which researchers from the startup Cathedral reached Anthropic's commercial, HR and IT systems through vulnerable third-party administrative applications. Exposed data included salaries, job offers, meeting transcripts and Slack messages; Anthropic says customer prompts, source code and model weights were not accessed. Anthropic cut access the same day and kept the apps disabled until vendors patched. The companies dispute whether Cathedral reported all its activity.
Japan Airlines disclosed that unauthorized access to Amadeus's Passenger Service System, between 10 August 2023 and 23 September 2026, exposed data on about 92,000 customers. Roughly 2,000 also had emails, phone and passport numbers exposed. ANA, Asiana Airlines and Korean Air are also reported as affected. Amadeus had announced a booking display vulnerability on 1 October 2026 and has not given the full scope.
Amadeus Passenger Service System
Japan AirlinesAmadeusAll Nippon Airways+3
Threat IntelΒ· Added 30 Oct 2026, published 29 Oct 2026
SingularityNET exploit (19 September 2026): attackers with signing authority exposed through a cloud infrastructure breach drained 8.72M FET from the Ethereum bridge converter, then minted about 2.3 billion AGIX, NTX, WMTX and CGV. Rekt's transaction-level reconstruction puts gross liquid proceeds near $2.29M, not the $16.77M headline, and traces laundering via Chainflip, Baltex and THORChain. It notes conversionIn() skipped checkLimits() and trusted a single EOA signature.
Oversecured's Android security checklist on arbitrary file theft from an app's private storage. It covers implicit intents (PICK, GET_CONTENT) returning file:// or content:// URIs, SEND/SEND_MULTIPLE share activities, exported and non-exported FileProviders, path traversal via Uri.getLastPathSegment, WebView, and local NanoHTTPD servers. Each case has vulnerable code, an attacker PoC and fixes such as /proc/self/fd path checks and narrow files-path entries.
Oversecured guide to SDK security in mobile apps, built around Microsoft's April 2026 disclosure of an intent redirection flaw in EngageLab's EngageSDK (50 million installs, fixed in 5.2.1). It covers SDK attack surfaces (exported components, WebViews, deep links, hardcoded secrets, payment crypto), a canhub image cropper file-overwrite example, why source-only SAST misses SDK code, and MASVS and PCI DSS expectations.
An Oversecured Head of Engineering, coming from 20 years of web work, describes four mobile security risks that became concrete after seeing real production apps. These are old vulnerable binaries that stay installed after a fix, secrets embedded in client code, Keychain/Keystore guarantees that are weaker than assumed with tokens leaking via logs, and deep links or exported components acting as public endpoints. It ends with advice: test the shipped artifact, verify the full data lifecycle, and build server-side containment.
Explainer on "shell" vulnerabilities, the -Shell naming for RCE flaws that began with Log4Shell (CVE-2021-44228). It compares memory-corruption bugs (PHP2Shell, CVE-2026-109618 and CVE-2026-109619; Node2Shell, CVE-2026-111497, in the Brotli decoder) with design-flaw bugs (Log4Shell, React2Shell, CVE-2025-55182). It covers shared traits, exposure through inherited components, and Brotli patch status across runtimes and distributions.
PHPNode.jsReact+3
CVE-2026-109618CVE-2026-109619CVE-2026-111497+16
AppSec, LearningΒ· Added 30 Oct 2026, published 29 Oct 2026
Unit 42 threat brief on PHP2Shell, two PHP remote code execution flaws, CVE-2026-109618 and CVE-2026-109619 (CVSS 4.0 9.2), both caused by longjmp() error handling that leaves memory uninitialized or freed. Cortex Xpanse counted over 22.6 million exposed instances. The 29 October 2026 update says attackers chained PHP2Shell with a Linux kernel privilege escalation against internet-exposed PAN-OS management interfaces. An earlier 23 October claim of post-compromise activity was retracted on 25 October.
PHPPAN-OSLinux kernel+2
CVE-2026-109618CVE-2026-109619PHP2Shell+2
Threat Intel, AppSecΒ· Added 30 Oct 2026, published 29 Oct 2026
blog.cloudflare.comarticleπ‘οΈ Security
