{"vulnerability": "cve-2026-1051", "sightings": [{"uuid": "70e7f8b3-fd94-4a48-8ef1-897252fb7ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1051", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcthvcxwvo2r", "content": "", "creation_timestamp": "2026-01-20T05:56:06.052105Z"}, {"uuid": "921a427e-fe1d-4882-8bb9-f77cbca0e816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1051", "type": "seen", "source": "https://gist.github.com/Darkcrai86/4c1489717e023979441986a7f7040920", "content": "", "creation_timestamp": "2026-01-20T07:52:08.000000Z"}, {"uuid": "8e13de32-eb5b-42be-aeb6-6c09b706dadd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10514", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnbgbdnijw2z", "content": "CVE-2026-10514 - 1Panel-dev CordysCRM RequestParamTrimConfig.java cross site scripting\nCVE ID : CVE-2026-10514\n \n Published : June 2, 2026, 12:16 a.m. | 16\u00a0minutes ago\n \n Description : A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown ...", "creation_timestamp": "2026-06-02T01:16:14.114708Z"}, {"uuid": "6a5b60dd-e774-4379-ab56-2f1f31150fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10510", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116678277579231176", "content": "\ud83d\udee1\ufe0f CVE-2026-10510: HIGH severity XSS in TECNO Mobile AI Assistant Lifestyle (v1.3.0.002). Remote JS execution via GeniexWebView; no patch yet. Monitor vendor updates & avoid untrusted links. https://radar.offseq.com/threat/cve-2026-10510-cwe-79-improper-neutralization-of-i-501798a2 #OffSeq #Android #XSS #Vuln", "creation_timestamp": "2026-06-02T03:01:39.552286Z"}, {"uuid": "5dfdf2a5-0709-482b-be4f-70845da4eb60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10513", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpwpftltek2h", "content": "CVE-2026-10513 webmention (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-05T23:16:06.670399Z"}, {"uuid": "12df0331-4397-4a9b-aa51-a5feab413cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10518", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwbepv7amn2m", "content": "\ud83d\udd17 CVE : CVE-2026-10518, CVE-2026-4523, CVE-2026-84739, CVE-2026-89078, CVE-2026-8937, CVE-2026-92470, CVE-2026-92529, CVE-2026-92530, CVE-2026-92628, CVE-2026-92874, CVE-2026-93577", "creation_timestamp": "2026-09-24T13:35:19.480991Z"}, {"uuid": "907a38c1-433f-4086-a128-732502d96e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-10518", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-remote-code-execution-vulnerabilities-gitlab-patch-immediately", "content": "", "creation_timestamp": "2026-09-24T08:00:45.000000Z"}, {"uuid": "c0374ac4-dd72-4594-805f-26d5d580be9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105105", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117377218887743973", "content": "NASA-AMMOS AIT-Core \u22643.1.1 has a CRITICAL vuln (CVE-2026-105105): ZeroMQ bus lacks auth, exposing command & telemetry to remote attackers. Upgrade to 3.1.2 restricts access to loopback. Details: https://radar.offseq.com/threat/cve-2026-105105-cwe-306-missing-authentication-for-critical-function-in-nasa-ammos-ait-core-6642dd3ce660454d #OffSeq #CVE #SpaceSec #Infosec", "creation_timestamp": "2026-10-03T13:30:24.579975Z"}, {"uuid": "e90cb94b-e654-475b-88e7-bd7da87f4251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105105", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwxynggaxk23", "content": "Critical flaw in NASA-AMMOS AIT-Core \u22643.1.1: ZeroMQ message bus lacks authentication, risking remote command injection & data theft. Patch by upgrading to 3.1.2. https://radar.offseq.com/threat/cve-2026-105105-cwe-306-missing-authentication-for-critical-function-in-nasa-ammos-ait-core-6642dd3ce66...", "creation_timestamp": "2026-10-03T13:30:27.115163Z"}, {"uuid": "14ac23f6-c2b4-4f72-989c-389d1aca0b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105105", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwy2p75ib52o", "content": "\ud83d\udea8 CVE-2026-105105 \u2014 CVSS 9.8 CRITICAL\n\nCWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105105\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-03T14:07:13.032982Z"}, {"uuid": "0cb14fef-04c9-4e8e-a32c-76f0786d3d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105115", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwy6nrhdv52g", "content": "\ud83d\udfe0 CVE-2026-105115 - High (8.6)\n\nOpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105115/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T15:18:00.672207Z"}, {"uuid": "c54e9546-00ff-45a9-8948-37f3fe916dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwy6nycgm52n", "content": "\ud83d\udd34 CVE-2026-105105 - Critical (9.8)\n\nCWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and comman...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105105/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T15:18:09.113529Z"}, {"uuid": "027ff4f7-facb-4880-8239-65c4428febb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105121", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/esheqhcwrsrpl", "content": "CVE-2026-105121 - OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping\nCVE ID : CVE-2026-105121\n \n Published : Oct. 3, 2026, 2:16 p.m. | 47\u00a0minutes ago\n \n Description : OpenAM before 16.1.3 contains an improper authorization vulnerability that...", "creation_timestamp": "2026-10-03T15:47:25.378992Z"}, {"uuid": "1b4bee1c-8512-4d19-8218-55b2b25d488f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105120", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bma3eerlqussf", "content": "CVE-2026-105120 - OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint\nCVE ID : CVE-2026-105120\n \n Published : Oct. 3, 2026, 2:16 p.m. | 47\u00a0minutes ago\n \n Description : OpenAM before 16.1.3 contains an authorization bypass vulnerability in the session...", "creation_timestamp": "2026-10-03T15:53:25.337064Z"}, {"uuid": "b1dc8787-7ae8-4c01-add9-838d7e43dfb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105119", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/crzb6afy4eyke", "content": "CVE-2026-105119 - OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows\nCVE ID : CVE-2026-105119\n \n Published : Oct. 3, 2026, 2:16 p.m. | 47\u00a0minutes ago\n \n Description : OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization r...", "creation_timestamp": "2026-10-03T15:59:26.178960Z"}, {"uuid": "dd24970e-76aa-4c27-b12a-b0e627e76f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105118", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hdstfj5dvkmnm", "content": "CVE-2026-105118 - OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession\nCVE ID : CVE-2026-105118\n \n Published : Oct. 3, 2026, 2:16 p.m. | 47\u00a0minutes ago\n \n Description : OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenti...", "creation_timestamp": "2026-10-03T16:05:25.784086Z"}, {"uuid": "01a49e47-0882-4bde-a962-350b7b635893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105122", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5r5rtwwwc5hon", "content": "CVE-2026-105122 - OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri\nCVE ID : CVE-2026-105122\n \n Published : Oct. 3, 2026, 2:16 p.m. | 47\u00a0minutes ago\n \n Description : OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able...", "creation_timestamp": "2026-10-03T16:07:25.668672Z"}, {"uuid": "401516e6-0a67-4caa-a546-57d9262a98cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105105", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwybpqeoxj2x", "content": "ait-server 3.1.1\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u306bZeroMQ\u30e1\u30c3\u30bb\u30fc\u30b8\u30d0\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u3002\u653b\u6483\u8005\u306f\u30b3\u30de\u30f3\u30c9\u6ce8\u5165\u3001\u60c5\u5831\u6f0f\u6d29\u3001\u507d\u88c5\u30c6\u30ec\u30e1\u30c8\u30ea\u6ce8\u5165\u3001\u901a\u4fe1\u59a8\u5bb3\u304c\u53ef\u80fd\u3002\nCVE-2026-105105 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-10-03T16:12:47.226272Z"}, {"uuid": "337b2a0b-3fef-4e78-9f5f-d0124a3bc5c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117378615596344582", "content": "A new vulnerability with increased severity was disclosed for InternLM MindSearch (CVE-2026-105135) https://vuldb.com/vuln/413352", "creation_timestamp": "2026-10-03T19:25:36.347006Z"}, {"uuid": "3a6a5260-bf72-4a40-be72-96f48919f31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117378933239812056", "content": "There is a new vulnerability with elevated criticality in Ahsay AhsayCBS (CVE-2026-105134) https://vuldb.com/vuln/413351", "creation_timestamp": "2026-10-03T20:46:23.154787Z"}, {"uuid": "d75f78a0-5c48-464d-a27b-15f56af694c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105123", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwz5kqs3yn2b", "content": "\ud83d\udfe0 CVE-2026-105123 - High (8.8)\n\nW (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allow...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105123/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T00:31:07.367854Z"}, {"uuid": "ff0fb017-fdd2-481c-a8f6-40b40a7abb43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105123", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117380050105304564", "content": "vincent-peugnet wcms \u22643.18.0 is vulnerable (CVE-2026-105123, HIGH, CVSS 8.7): Authenticated editors can upload malicious files via /api/v0/media/upload/ and delete arbitrary files. Restrict privileges, monitor uploads. https://radar.offseq.com/threat/cve-2026-105123-unrestricted-upload-of-file-with-dangerous-type-in-vincent-peugnet-wcms-9cc4f5671e51d0dd #OffSeq #RCE #WebSecurity #Vuln", "creation_timestamp": "2026-10-04T01:30:25.437272Z"}, {"uuid": "7fa9bfc6-d614-4df1-b727-efe88194073b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105123", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwzauvzaqs2p", "content": "vincent-peugnet wcms \u22643.18.0 has a HIGH-severity vuln: CVE-2026-105123 allows editor-level RCE via arbitrary file upload. Restrict privileges & monitor endpoints. https://radar.offseq.com/threat/cve-2026-105123-unrestricted-upload-of-file-with-dangerous-type-in-vincent-peugnet-wcms-9cc4f5671e51d0...", "creation_timestamp": "2026-10-04T01:30:27.475823Z"}, {"uuid": "5f5298df-ba90-4998-a23c-da9faf8228c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105123", "type": "seen", "source": "https://gist.github.com/ichintu/1d0f62e7f5bbc80cb4372e1a7110c679", "content": "On October 4, 2026, three high-severity vulnerabilities were disclosed:\n\u2022 **CVE-2026-88779 (8.7):** Memory overflow in older NetScaler ADC/Gateway versions, causing Denial of Service.\n\u2022 **CVE-2026-105126 (8.6):** Privilege escalation in LaraDashboard (<1.4.8) allowing admins to gain Superadmin rights, risking account takeover and code execution.\n\u2022 **CVE-2026-105123 (8.8):** Remote Code Execution and arbitrary file manipulation in W CMS (\u22643.18.0) via an unvalidated media upload API.\n\nImmediate patching or version updates are strongly recommended to mitigate these critical risks.", "creation_timestamp": "2026-10-04T04:00:28.000000Z"}, {"uuid": "c46ed481-9913-46c4-9877-472a239c3a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105126", "type": "seen", "source": "https://gist.github.com/ichintu/1d0f62e7f5bbc80cb4372e1a7110c679", "content": "On October 4, 2026, three high-severity vulnerabilities were disclosed:\n\u2022 **CVE-2026-88779 (8.7):** Memory overflow in older NetScaler ADC/Gateway versions, causing Denial of Service.\n\u2022 **CVE-2026-105126 (8.6):** Privilege escalation in LaraDashboard (<1.4.8) allowing admins to gain Superadmin rights, risking account takeover and code execution.\n\u2022 **CVE-2026-105123 (8.8):** Remote Code Execution and arbitrary file manipulation in W CMS (\u22643.18.0) via an unvalidated media upload API.\n\nImmediate patching or version updates are strongly recommended to mitigate these critical risks.", "creation_timestamp": "2026-10-04T04:00:28.000000Z"}, {"uuid": "f6e8fd4c-44a7-4b27-b283-a048359bfb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105123", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwzontqtmc22", "content": "wcms 3.18.0\u4ee5\u4e0b\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30a8\u30c7\u30a3\u30bf\u30fc\u304c\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\uff08php\u30d5\u30a1\u30a4\u30eb\u542b\u3080\uff09\u3092\u66f8\u304d\u63db\u3048\u308b\u3001\u307e\u305f\u306f\u524a\u9664\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-105123 CVSS 8.8 | HIGH", "creation_timestamp": "2026-10-04T05:37:03.141871Z"}, {"uuid": "c4fa6918-d5cd-4f2d-888d-2edb4bf600c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105135", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117381465680047279", "content": "InternLM MindSearch 0.1.0 hit by CRITICAL code injection (CVE-2026-105135) in ExecutionAction.run \u2014 remote attackers can execute arbitrary code via manipulated inputs. No patch; restrict access & monitor for updates. https://radar.offseq.com/threat/cve-2026-105135-code-injection-in-internlm-mindsearch-f0d6fc8a61cd76d9 #OffSeq #CVE2026105135 #infosec #zeroday", "creation_timestamp": "2026-10-04T07:30:25.369781Z"}, {"uuid": "daeb6aa9-adcf-410d-bcc2-2857f44bce4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105135", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwzuyncpbh2j", "content": "InternLM MindSearch 0.1.0 faces CRITICAL code injection (CVE-2026-105135). Remote attackers can run arbitrary code \u2014 no patch yet. Restrict access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-105135-code-injection-in-internlm-mindsearch-f0d6fc8a61cd76d9 #OffSeq #CVE202610513...", "creation_timestamp": "2026-10-04T07:30:27.412684Z"}, {"uuid": "e43128a4-b511-4b03-91e7-11072ea06af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://gist.github.com/ichintu/231f28d16cc1668438fdb199fb3943c7", "content": "This daily cyber threat intelligence briefing covers critical vulnerabilities, enforcement actions, emerging threats, and strategic guidance:\n\n- **Critical Vulnerabilities:** Two CVSS 10.0 flaws were disclosed: a code injection in InternLM MindSearch (CVE-2026-105135) and an OS command injection in Ahsay AhsayCBS (CVE-2026-105134), both actively exploited in the wild.\n- **Law Enforcement & Espionage:** The FBI detained suspected ShinyHunters extortionist \u201cRey\u201d in Jordan, who is now cooperating with investigators. Separately, China-aligned TA419 is targeting U.S. AI policy experts with Microsoft account takeover phishing campaigns.\n- **Post-Quantum Migration:** Experts urge SMBs to immediately map cryptographic assets and begin migration to counter \u201charvest now, decrypt later\u201d threats, citing finalized NIST PQC standards and cloud vendor roadmaps.\n- **Industry Discourse:** Security professionals highlight that superficially renaming threats or security practices cannot substitute for addressing underlying vulnerabilities and operational gaps.", "creation_timestamp": "2026-10-04T08:00:33.000000Z"}, {"uuid": "a7951e9c-db34-429d-977a-f097d3a17afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://gist.github.com/ichintu/231f28d16cc1668438fdb199fb3943c7", "content": "This daily cyber threat intelligence briefing covers critical vulnerabilities, enforcement actions, emerging threats, and strategic guidance:\n\n- **Critical Vulnerabilities:** Two CVSS 10.0 flaws were disclosed: a code injection in InternLM MindSearch (CVE-2026-105135) and an OS command injection in Ahsay AhsayCBS (CVE-2026-105134), both actively exploited in the wild.\n- **Law Enforcement & Espionage:** The FBI detained suspected ShinyHunters extortionist \u201cRey\u201d in Jordan, who is now cooperating with investigators. Separately, China-aligned TA419 is targeting U.S. AI policy experts with Microsoft account takeover phishing campaigns.\n- **Post-Quantum Migration:** Experts urge SMBs to immediately map cryptographic assets and begin migration to counter \u201charvest now, decrypt later\u201d threats, citing finalized NIST PQC standards and cloud vendor roadmaps.\n- **Industry Discourse:** Security professionals highlight that superficially renaming threats or security practices cannot substitute for addressing underlying vulnerabilities and operational gaps.", "creation_timestamp": "2026-10-04T08:00:33.000000Z"}, {"uuid": "72c6ec05-c429-4873-92ee-add5f0a64048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwzx26cith22", "content": "\ud83d\udea8 CVE-2026-105134 \u2014 CVSS 9.3 CRITICAL\n\nA flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105134\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T08:07:05.861390Z"}, {"uuid": "5402ba0a-7c43-490f-896c-6fdedf98a690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwzx2goack2l", "content": "\ud83d\udea8 CVE-2026-105135 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionActio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105135\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T08:07:15.063017Z"}]}