Daily Archives: Nov 2, 2026

An unauthorized relay service for AI coding tools has been found installing legitimate OpenAI Codex and Anthropic Claude Code clients on corporate machines, then changing their configurations so requests are routed through third-party servers. The installation also disables sandbox protections, creating a channel by which sensitive business...

The Cybersecurity and Infrastructure Security Agency (CISA) has warned that threat actors are actively exploiting CVE-2026-97229, a GitLab vulnerability that can enable unauthenticated code execution on affected servers. CISA added the flaw to its Known Exploited Vulnerabilities catalog on October 29, 2026, citing evidence of active...

Attackers are chaining zero-day vulnerabilities in Ivanti Connect Secure VPN appliances to gain unauthenticated root access, exposing stored credentials and sensitive Active Directory data. Ivanti confirmed attacks against a limited set of customers and released additional fixes on October 29, 2026, following its initial October security...