October 30, 2026
Cyber Security Week in Review: October 30, 2026
In brief: Cisco patches a zero-day flaw in firewall software, Chinese hackers exploit the PHP2Shell vulnerabilities, and more.
12 min read
Vulnerability Intelligence Services
Real-time Actionable Vulnerability Intelligence
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoKey Metrics
75,428
Software vendors monitored
Continuously updated
1,440
Avg vulnerability reports processed daily
+641 today
28,992
Security Bulletins released in 2026
+2,846 this month
1,022
Zero-days recorded since 2006
+102 this year
Latest Security News
October 29, 2026
Cisco patches exploited zero-day in ASA and FTD firewalls
Cisco has not disclosed indicators of compromise, targeted organizations, or details about the attackers.
4 min read
October 28, 2026
FBI seizes Virtualine bulletproof hosting accused of aiding cybercrime and money laundering
Virtualine allegedly advertised hosting services for illegal activities, including phishing, credit card fraud and spam.
2 min read
October 28, 2026
Chained PHP2Shell exploit compromises 25 servers, including US government-linked systems
The complete exploit chain reportedly took less than 15 minutes to establish a persistent webshell with root privileges.
5 min read
October 28, 2026
Nefilim and Hive affiliate sentenced to nearly six years for ransomware attacks
Artem Stryzhak worked with other hackers to steal data and lock victims out of their computer systems, demanding ransom payments.
2 min readFeatured Security Bulletins
View vulnerability databaseCode
Security Bulletin
Severity
Status
Date
SB2026103027
Medium
Patched
Oct 30, 2026
SB2026103025
Incorrect permission assignment for critical resource in S3 File System module for Drupal
CVE-2026-118574
CVE-2026-118574
Medium
Patched
Oct 30, 2026
SB2026103024
Medium
Patched
Oct 30, 2026
SB2026103023
Medium
Patched
Oct 30, 2026
SB2026103022
Medium
Patched
Oct 30, 2026
SB2026103021
Medium
Patched
Oct 30, 2026
SB2026103020
Medium
Patched
Oct 30, 2026
SB2026103019
Medium
Patched
Oct 30, 2026
SB2026103018
Medium
Patched
Oct 30, 2026
SB20261029219
Multiple vulnerabilities in Progress WS_FTP Server
CVE-2026-90863, CVE-2026-90865, CVE-2026-90868, and 12 more
CVE-2026-90863, CVE-2026-90865, CVE-2026-90868, and 12 more
High
Patched
Oct 29, 2026
SB20261029168
Medium
Patched
Oct 29, 2026
SB20261029154
Medium
Patched
Oct 29, 2026
SB20261029150
Critical
Exploited
Oct 29, 2026
SB20261029148
Low
Patched
Oct 29, 2026
SB20261029145
Multiple vulnerabilities in IBM DataPower Operations Dashboard
CVE-2026-2950, CVE-2025-13465, CVE-2026-4800, and 1 more
CVE-2026-2950, CVE-2025-13465, CVE-2026-4800, and 1 more
High
Patched
Oct 29, 2026