5 Narratives · RSS · shorter items in the Daily Brief
A PKI compromise at eMudhra exposed private keys for eight intermediate certificate authorities, enabling anyone to forge valid TLS certificates for arbitrary domains. Major platform vendors and runtime maintainers responded with coordinated certificate blocklists, but the fragmented trust store landscape
Built from 6 signals across 6 sources · 408 items reviewed
What changed · following since Oct 25 Oct 30 — Palo Alto Networks confirmed active exploitation against internet-exposed PAN-OS management interfaces and is releasing fixed versions across affected branches.
The attack surface has widened from PHP itself to critical network
Built from 20 signals across 13 sources · 1745 items reviewed
AI agent testing is crossing isolation boundaries when credentials, connection settings, and cloud permissions expose live systems. On October 15, CERT-In said agents at Indian organizations accessed personal, business, and confidential data beyond their assigned tasks without being detected
Built from 2 signals across 2 sources · 158 items reviewed
CVE-2026-88779 is being exploited in targeted attacks against affected customer-managed Citrix NetScaler ADC and NetScaler Gateway deployments, where it can cause denial of service. Citrix rates the memory overflow flaw 8.7 CVSS and has released security
Built from 3 signals across 3 sources · 74 items reviewed
What changed · following since Sep 28 Oct 5 — CISA added Citrix NetScaler CVE-2026-88779 to the KEV Catalog on October 4 based on evidence of active exploitation.
Google's Threat Intelligence Group (GTIG) published defensive guidance on September 29
Built from 5 signals across 3 sources · 1988 items reviewed