Daily News
Dahua Camera Takeover Via Easy4IP Cloud Access
Attackers are taking over Dahua IP cameras and video recorders through Easy4IP, Dahua’s cloud remote-access feature, according to a CERT-UA alert published on October 23 and reported by Security Affairs on October 27. A Dahua camera takeover does not need an open port: the device dials out to Dahua’s cloud, and from there it can…
Read MoreBrotli RCE Vulnerability Node2Shell Added to CISA KEV
The Brotli RCE vulnerability CVE-2026-111497, known as Node2Shell, was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog on October 27. Brotli is compression code that sits inside runtimes, web servers and browsers, so the flaw lives in places nobody lists as a product. On October 26, researchers still disagreed on how reliably it gives code…
Read MoreFortiSIEM RCE Vulnerability Now Has a Public Exploit
A FortiSIEM RCE vulnerability, CVE-2026-106173, now has a public exploit, and as of October 26 the Canadian Cyber Centre says open-source reporting indicates it is being exploited in the wild. FortiSIEM is the system many teams use to spot attacks, so a compromised appliance costs defenders visibility and hands an attacker a foothold next to…
Read MoreLiteLLM Supply Chain Attack: A Key Never Revoked
The LiteLLM supply chain attack of October 21 did not start on October 21. According to LiteLLM’s own root cause report, a master key committed to a public repository on May 27 was never revoked. An attacker used it on October 10 to reach the GitHub account of an organization owner, and eleven days later…
Read MoreDigital Omnibus Incident Reporting: Council Position
The Council of the European Union has agreed its negotiating position on changes that could reshape Digital Omnibus incident reporting: how organisations report personal-data breaches and cybersecurity incidents. For MSPs and MSSPs that run incident response for clients, the proposals could matter a great deal. They are not law yet. What Happened On 21 October…
Read More