HIGH/ NOVEMBER 3, 2026TODAY’S BRIEFING — #228
Google dismantles 1.3M Android botnet; critical Langflow RCE; Microsoft patches 1,400 flaws
Google disrupted a 1.3M-device Android TV botnet allegedly supplied by manufacturer Videostrong; IBM disclosed critical Langflow RCEs; Microsoft released 1,400+ patches.
CVE-2026-109618PHP Group PHP — PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. · In CISA KEVCVE-2026-109619PHP Group PHP — PHP has various global state that temporarily points into request memory. · In CISA KEVCVE-2026-108398Microsoft Windows — Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.CVE-2026-96951Microsoft Windows — Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security… · In CISA KEV
Read the full briefing →