INTELLIGENCE BRIEFS

Over 480 K Public Cloud Buckets Expose 18 Billion Files, Including Credentials and Backups

Short‑Burst DDoS Swarms Surge 208% in Q3 2026, Giant IoT Botnet Attacks Plummet

CISA Adds Linux Kernel and Broadcom VMware ESX Flaws to KEV Catalog, Highlighting Logging Gaps and Local Privilege‑Escalation Risks

Code Execution and File‑Theft Flaws Discovered in Five Popular AI Coding Assistants

AI Powers 52% of Detected Ad‑Fraud Schemes, Shopping Assistants Identified as Next Target

Server‑Side Request Forgery in MLflow AI Gateway (CVE‑2026‑71211) Exposes Internal Resources

Remote Code Execution in MLflow Statsmodels _load_model (CVE-2024-37052) Threatens ML Pipelines

Unauthenticated SSRF in MLflow get‑artifacts (CVE‑2026‑118628) Exposes Sensitive Data

Remote Code Execution in MLflow SHAP load_explainer (CVE‑2026‑118627) Threatens ML Model Deployment

Privilege Escalation in MLflow Tracking Server (CVE-2026-118626) Bypasses Authorization Controls

Remote Code Execution in MLflow PickleEvaluationArtifact (CVE‑2026‑118623) Exposes Model Pipelines

Local Privilege Escalation in FreeBSD Kernel (CVE-2026-58093) Enables TTY Race Condition Attack

Use‑After‑Free in Linux Kernel XFRM Subsystem (CVE‑2026‑98231) Enables Local Privilege Escalation

Use‑After‑Free in Linux CIFS Driver (CVE‑2026‑72315) Enables Local Privilege Escalation

Server-Side Request Forgery (CVE-2026-64849) in MLflow Webhook Engine Enables Authenticated Data Exposure

Privilege Escalation in MLflow Tracking Server (CVE-2026-118625) Allows Authenticated Attackers to Gain Elevated Access

Info Disclosure in MLflow Tracking Server (CVE‑2026‑118624) Allows Unauthorized Data Access

Use‑After‑Free in Linux Kernel Logitech HIDPP Protocol (CVE‑2026‑93826) Enables Local Privilege Escalation

Local Privilege Escalation in Linux Kernel (CVE‑2026‑80844) via IPv6 AH Routing Header Integer Underflow

Fake Desktop Apps for ChatGPT and Claude Distribute Yoba Cryptominer Malware