<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Threat Digests | East Bay Cyber</title><link>https://eastbaycyber.com/digests/</link><description>Daily and weekly cybersecurity threat digests, breach analyses, and CISA KEV updates.</description><lastBuildDate>Sat, 07 Nov 2026 05:00:39 GMT</lastBuildDate><item><title>Cybersecurity Threat Digest November 6, 2026</title><link>https://eastbaycyber.com/content/2026-11-06-digest-dlink-ofbiz-keycloak/</link><guid isPermaLink="false">2026-11-06-digest-dlink-ofbiz-keycloak</guid><pubDate>Fri, 06 Nov 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for November 6, 2026: D-Link switch zero-days, Apache OFBiz RCEs, Keycloak risks, and response steps. CISA added 3 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Cybersecurity Threat Digest November 5, 2026</title><link>https://eastbaycyber.com/content/2026-11-05-digest-healthcare-zyxel-router-rces/</link><guid isPermaLink="false">2026-11-05-digest-healthcare-zyxel-router-rces</guid><pubDate>Thu, 05 Nov 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest: French healthcare disruption, Zyxel exploitation, router RCEs, supply-chain malware, phishing, and urgent defenses. CISA added 4 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Cybersecurity Threat Digest November 4, 2026: WordPress, Mobile, and Supply-Chain Threats</title><link>https://eastbaycyber.com/content/2026-11-04-digest-wordpress-mobile-supply-chain-threats/</link><guid isPermaLink="false">2026-11-04-digest-wordpress-mobile-supply-chain-threats</guid><pubDate>Wed, 04 Nov 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest: exploited WordPress, mobile zero-click attacks, supply-chain abuse, critical CVEs, and urgent defensive actions. CISA added 6 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Cybersecurity Threat Digest November 3, 2026: Android TV Botnet Disrupted, Harvard Breach, and Critical Admin Panel Flaws</title><link>https://eastbaycyber.com/content/2026-11-03-digest-android-tv-botnet-harvard-breach/</link><guid isPermaLink="false">2026-11-03-digest-android-tv-botnet-harvard-breach</guid><pubDate>Tue, 03 Nov 2026 00:00:00 GMT</pubDate><description>Today’s cybersecurity digest covers the XCPE Android TV botnet takedown, Harvard breach, AI-enabled attacks, and critical admin panel vulnerabilities. CISA added 7 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest November 2, 2026: GitLab RCE, Ransomware</title><link>https://eastbaycyber.com/content/2026-11-02-digest-gitlab-ransomware-ivanti-wavlink/</link><guid isPermaLink="false">2026-11-02-digest-gitlab-ransomware-ivanti-wavlink</guid><pubDate>Mon, 02 Nov 2026 00:00:00 GMT</pubDate><description>Cybersecurity digest covering active GitLab RCE attacks, Synology ransomware, Ivanti zero-days, and critical WAVLINK router flaws. CISA added 8 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest November 1, 2026: AI Attacks and Router Exploits</title><link>https://eastbaycyber.com/content/2026-11-01-digest-ai-attacks-netamloader-router-exploits/</link><guid isPermaLink="false">2026-11-01-digest-ai-attacks-netamloader-router-exploits</guid><pubDate>Sun, 01 Nov 2026 00:00:00 GMT</pubDate><description>November 1, 2026 cybersecurity digest covering AI-assisted attacks, NetamLoader, exposed AI keys, Android flaws, and router exploits. CISA added 10 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest October 31, 2026: Ivanti, GitLab &amp; Backdoors</title><link>https://eastbaycyber.com/content/2026-10-31-digest-ivanti-gitlab-backdoors/</link><guid isPermaLink="false">2026-10-31-digest-ivanti-gitlab-backdoors</guid><pubDate>Sat, 31 Oct 2026 00:00:00 GMT</pubDate><description>October 31, 2026 threat digest: Ivanti root access, exploited GitLab, developer backdoors, Linux MPTCP flaws, and urgent defenses. CISA added 10 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest October 30, 2026: Drupal, Dev Tools, AI Attacks</title><link>https://eastbaycyber.com/content/2026-10-30-digest-drupal-developer-tools-ai-attacks/</link><guid isPermaLink="false">2026-10-30-digest-drupal-developer-tools-ai-attacks</guid><pubDate>Fri, 30 Oct 2026 00:00:00 GMT</pubDate><description>The cybersecurity threat digest for October 30, 2026 covers Drupal, developer tools, Langflow, GPU malware, and urgent defender actions. CISA added 10 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest October 29, 2026: Cisco Firewall Zero-Day, Critical RCE Flaws, and Incident Response Strain</title><link>https://eastbaycyber.com/content/2026-10-29-digest-cisco-firewall-zero-day-critical-rce/</link><guid isPermaLink="false">2026-10-29-digest-cisco-firewall-zero-day-critical-rce</guid><pubDate>Thu, 29 Oct 2026 00:00:00 GMT</pubDate><description>Today&#x27;s cybersecurity threat digest covers an exploited Cisco firewall zero-day, critical RCE flaws, breach response strain, and urgent defender actions. CISA added 10 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest October 28, 2026: Node2Shell and Ransomware</title><link>https://eastbaycyber.com/content/2026-10-28-digest-node2shell-ransomware/</link><guid isPermaLink="false">2026-10-28-digest-node2shell-ransomware</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>CISA confirms Node2Shell exploitation as ransomware disrupts healthcare and technology while defenders prioritize KEV flaws and critical patches. CISA added 8 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest — October 27, 2026: Apple Zero-Day, Breaches</title><link>https://eastbaycyber.com/content/2026-10-27-digest-apple-zero-day-cisa-kev-breaches/</link><guid isPermaLink="false">2026-10-27-digest-apple-zero-day-cisa-kev-breaches</guid><pubDate>Tue, 27 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for October 27, 2026, covering Apple zero-day patches, CISA KEV additions, major breaches, and urgent fixes. CISA added 6 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest — October 26, 2026: PHP2Shell and Router Flaws</title><link>https://eastbaycyber.com/content/2026-10-26-digest-php2shell-router-flaws/</link><guid isPermaLink="false">2026-10-26-digest-php2shell-router-flaws</guid><pubDate>Mon, 26 Oct 2026 00:00:00 GMT</pubDate><description>PHP2Shell exploitation, critical Oray router flaws, AI coding-agent abuse, and urgent defensive actions for October 26, 2026. CISA added 10 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Cybersecurity Threat Digest October 25, 2026</title><link>https://eastbaycyber.com/content/2026-10-25-digest-blackx-postiz-unitree-python-oracle/</link><guid isPermaLink="false">2026-10-25-digest-blackx-postiz-unitree-python-oracle</guid><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate><description>BlackX targets Secure Boot while critical Postiz, Unitree, Python, and Oracle flaws demand focused patching and firmware defense. CISA added 8 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest — October 24, 2026: Critical Authentication Bypasses, WordPress RCE Risks, and Major Data Exposures</title><link>https://eastbaycyber.com/content/2026-10-24-digest-authentication-wordpress-data-exposures/</link><guid isPermaLink="false">2026-10-24-digest-authentication-wordpress-data-exposures</guid><pubDate>Sat, 24 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for October 24, 2026, covering critical vulnerabilities, data exposures, attacks, and urgent defender actions. CISA added 8 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest: Critical RCE Flaws, Exposed Credentials, and Major Data Breaches, October 24, 2026</title><link>https://eastbaycyber.com/content/2026-10-24-digest-rce-credentials-data-breaches/</link><guid isPermaLink="false">2026-10-24-digest-rce-credentials-data-breaches</guid><pubDate>Sat, 24 Oct 2026 00:00:00 GMT</pubDate><description>Today’s cybersecurity threat digest covers critical RCE flaws, exposed credentials, healthcare and public-sector breaches, and urgent defender actions. CISA added 8 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Cybersecurity Threat Digest — October 22, 2026</title><link>https://eastbaycyber.com/content/2026-10-22-digest-php2shell-plex-cybersecurity/</link><guid isPermaLink="false">2026-10-22-digest-php2shell-plex-cybersecurity</guid><pubDate>Thu, 22 Oct 2026 00:00:00 GMT</pubDate><description>October 22 cybersecurity digest covering PHP2Shell exploitation, Plex attacks, cloud compromise, critical CVEs, and urgent defensive actions. CISA added 8 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Cybersecurity Threat Digest: October 21, 2026</title><link>https://eastbaycyber.com/content/2026-10-21-digest-php-safepay-draytek/</link><guid isPermaLink="false">2026-10-21-digest-php-safepay-draytek</guid><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate><description>Today&#x27;s cybersecurity digest covers PHP emergency patches, SafePay ransomware, DrayTek exploits, WordPress keys, certificate trust, and defender actions. CISA added 9 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest: Supply-Chain Attacks and Critical RCE</title><link>https://eastbaycyber.com/content/2026-10-20-digest-supply-chain-attacks-critical-rce/</link><guid isPermaLink="false">2026-10-20-digest-supply-chain-attacks-critical-rce</guid><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for October 20, 2026: supply-chain attacks, critical vulnerabilities, major outages, and urgent actions for defenders. CISA added 13 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Cybersecurity Threat Digest: October 19, 2026</title><link>https://eastbaycyber.com/content/2026-10-19-digest-citrix-netscaler-siteguard-exchange-zimbra-vanus/</link><guid isPermaLink="false">2026-10-19-digest-citrix-netscaler-siteguard-exchange-zimbra-vanus</guid><pubDate>Mon, 19 Oct 2026 00:00:00 GMT</pubDate><description>Today&#x27;s cybersecurity digest covers exploited Citrix NetScaler zero-days, SiteGuard command injection, Exchange disruption, Zimbra phishing, and urgent fixes. CISA added 9 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest — October 18, 2026</title><link>https://eastbaycyber.com/content/2026-10-18-digest-microsoft-365-drupal-phpmyfaq/</link><guid isPermaLink="false">2026-10-18-digest-microsoft-365-drupal-phpmyfaq</guid><pubDate>Sun, 18 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for October 18, 2026 covering a Microsoft 365 supply-chain breach, critical Drupal flaws and phpMyFAQ account takeover risks. CISA added 9 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Cybersecurity Threat Digest: October 17, 2026</title><link>https://eastbaycyber.com/content/2026-10-17-digest-magento-mariadb-spyware/</link><guid isPermaLink="false">2026-10-17-digest-magento-mariadb-spyware</guid><pubDate>Sat, 17 Oct 2026 00:00:00 GMT</pubDate><description>Today&#x27;s cybersecurity threat digest covers a Magento RCE, zero-click spyware, MariaDB flaws, RIOT exposure, data breaches, and urgent defender actions. CISA added 9 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest — October 16, 2026: Active Exploits</title><link>https://eastbaycyber.com/content/2026-10-16-digest-beyondtrust-collabora-vulnerabilities/</link><guid isPermaLink="false">2026-10-16-digest-beyondtrust-collabora-vulnerabilities</guid><pubDate>Fri, 16 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for October 16, 2026, covering exploited BeyondTrust and Collabora flaws, critical CVEs, network devices, and response actions. CISA added 9 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest — October 15, 2026: PAN-OS &amp; Cisco Zero-Days</title><link>https://eastbaycyber.com/content/2026-10-15-digest-pan-os-cisco-zero-days/</link><guid isPermaLink="false">2026-10-15-digest-pan-os-cisco-zero-days</guid><pubDate>Thu, 15 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threats October 15, 2026 include exploited PAN-OS and Cisco flaws, public-sector data theft, supply-chain risk, and critical CVEs. CISA added 7 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest — October 14, 2026: Microsoft Patch Surge, Exploited Ivanti Zero-Day and Critical Infrastructure Risks</title><link>https://eastbaycyber.com/content/2026-10-14-digest-microsoft-ivanti-critical-infrastructure/</link><guid isPermaLink="false">2026-10-14-digest-microsoft-ivanti-critical-infrastructure</guid><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for October 14, 2026 covering Microsoft’s 1,411-fix patch surge, an exploited Ivanti zero-day, critical flaws and OT risks. CISA added 11 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest — October 13, 2026</title><link>https://eastbaycyber.com/content/2026-10-13-digest-retail-ai-router-flaws/</link><guid isPermaLink="false">2026-10-13-digest-retail-ai-router-flaws</guid><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for October 13, 2026: retail outages, AI testing risks, hardware implants, malware and critical router flaws. CISA added 7 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest — Oct. 12, 2026: GitLab RCE &amp; AvisLoader</title><link>https://eastbaycyber.com/content/2026-10-12-digest-gitlab-rce-avisloader/</link><guid isPermaLink="false">2026-10-12-digest-gitlab-rce-avisloader</guid><pubDate>Mon, 12 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for October 12, 2026 covering GitLab RCE, AvisLoader, Ahold Delhaize, critical CVEs, and urgent defender actions today. CISA added 5 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Cybersecurity Threat Digest: October 11, 2026</title><link>https://eastbaycyber.com/content/2026-10-11-digest-ai-shinyhunters-wordpress-vulnerabilities/</link><guid isPermaLink="false">2026-10-11-digest-ai-shinyhunters-wordpress-vulnerabilities</guid><pubDate>Sun, 11 Oct 2026 00:00:00 GMT</pubDate><description>Daily cybersecurity threat digest for October 11, 2026: AI-enabled attacks, a ShinyHunters-linked arrest and five critical vulnerabilities to triage. CISA added 5 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest — Oct. 10, 2026: SonicWall &amp; ClickFix</title><link>https://eastbaycyber.com/content/2026-10-10-digest-sonicwall-clickfix/</link><guid isPermaLink="false">2026-10-10-digest-sonicwall-clickfix</guid><pubDate>Sat, 10 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for October 10, 2026: SonicWall and AhsayCBS exploitation, ShinyHunters arrests, ClickFix campaigns, and urgent fixes. CISA added 6 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Threat Digest: NetScaler RCE, DataPower &amp; Flax Typhoon</title><link>https://eastbaycyber.com/content/2026-10-09-digest-netscaler-datapower-flax-typhoon/</link><guid isPermaLink="false">2026-10-09-digest-netscaler-datapower-flax-typhoon</guid><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate><description>October 9, 2026 cybersecurity digest: NetScaler RCE, IBM DataPower flaws, Flax Typhoon disruption, Windows updates and infrastructure risks. CISA added 6 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item><item><title>Cybersecurity Threat Digest: October 8, 2026</title><link>https://eastbaycyber.com/content/2026-10-08-digest-fortibleed-vpn-ai-attacks/</link><guid isPermaLink="false">2026-10-08-digest-fortibleed-vpn-ai-attacks</guid><pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate><description>Cybersecurity threat digest for October 8, 2026 covering FortiBleed attacks, critical VPN flaws, AI-enabled intrusions, breaches, and urgent defender actions. CISA added 8 vulnerabilities to the Known Exploited Vulnerabilities catalog in the seven days to this digest.</description></item></channel></rss>
