k0t VPN Credentials Leak: 70,000+ Firewall Logins Exposed
The k0t VPN credentials leak exposed 70,000+ firewall logins via FortiGate, FortiWeb and GlobalProtect. Patch, rotate, hunt IOCs and report to CERT-In.
0 Comments
October 26, 2026
Verified analysis of major vulnerabilities, breaches and security incidents, with what to patch and do next.
Pillow Vulnerability CVE-2026-112900: EPS Flaw, Fix and Checks
Pillow vulnerability CVE-2026-112900 lets crafted EPS filenames inject Ghostscript options. Check your version, upgrade to 13.0.0 and lock down uploads.
October 26, 2026
Tailscale SSH Vulnerability: Root Risk, Fixes and What to Do
Tailscale SSH vulnerability guide: July root bugs fixed in 1.98.9/1.98.10, new Tailworm flaws unpatched. Update, audit SSH rules, check servers.
October 26, 2026
HTTP2Shell (CVE-2026-111497): Patch Brotli Beyond Node.js
HTTP2Shell (CVE-2026-111497) hits Brotli in Bun, Python, Envoy, Istio and Linux distros. Fixed versions, tested checks and proxy workarounds.
October 26, 2026
Node.js October 2026 Security Release: Node2Shell and 9 More Fixes
The October 2026 Node.js security release fixes 10 flaws, including Node2Shell RCE. See the fixed versions and how to update servers and Docker images.
October 26, 2026
NGINX October 2026 Vulnerabilities: Check Your Config and Patch
Five NGINX vulnerabilities were fixed in 1.30.6 and 1.31.7. Learn which configs are at risk, how to audit yours with nginx -T and how to patch safely.
October 26, 2026
OVHcloud CLI and Railway Incidents: Which Secrets to Rotate
The OVHcloud CLI was swapped for a stealer and Railway exposed environment variables. Learn who is affected and how to rotate secrets after each incident.
October 25, 2026
LiteLLM 1.107.0 Was Backdoored: How to Check and Clean Up
LiteLLM 1.107.0 on PyPI and Docker Hub carried a credential stealer on 21 Oct 2026. Check if you installed it, clean up safely and rotate the right secrets.
October 25, 2026
GitLab CVE-2026-110264: Patch Self-Managed GitLab Now
CVE-2026-110264 is a CVSS 10 GitLab flaw affecting every self-managed version since 7.0. Check your version, upgrade safely and spot attack attempts.
October 24, 2026
Nextcloud CVE-2026-110447: Built-in CODE Server Exploited
CVE-2026-110447 lets attackers plant web shells via Nextcloud's Built-in CODE Server app. Check your version, update or remove it, and hunt for compromise.
October 24, 2026