Daily Archives: Nov 2, 2026

AOMEI update mechanism abused to deliver CROSSROAD and SHINYROAD malware A brief change to AOMEI’s software update system allowed attackers to deliver malware through a trusted update channel. Google Cloud’s Threat Intelligence Group (GTIG) together with Mandiant discovered that threat actors repeatedly modified...

Drupal has released security updates to fix a critical remote code execution vulnerability that could allow attackers to take control of affected sites without signing in. Tracked as CVE-2026-108097, the flaw is in the Field UI module in Drupal core. The Drupal Security Team published the...

Attackers are exploiting a command injection vulnerability in SiteGuard Server Edition, a web application firewall that runs directly on the servers it protects. Recorded as CVE-2026-106931, the flaw can allow execution of operating-system commands with elevated privileges (root on Unix or SYSTEM on Windows), potentially giving...