Skip to content

malwarechronicle

Breaking

Upgrade s2n-tls to v1.7.6 to patch CVE-2026-16317/18 QUIC memory exhaustion and TLS 1.3 record drop flaws
Upgrade FearlessCMS to 0.1.3b to stop unverified Git repos from executing arbitrary PHP code
Verify Government Email Sources as TAG-193 Targets CIS Agencies
Patch Hitachi Remote Ops Agent to 2.0 to Stop Critical Account Hijack via Unrestricted Reset Codes
Patch Better Auth to 1.7.7 to Stop OAuth Account Takeover
Patch WeGIA SQLi Flaw: Critical CVE-2026-55683 Threatens Billing Data in Versions Before 3.8.6
Upgrade s2n-tls to v1.7.6 to patch CVE-2026-16317/18 QUIC memory exhaustion and TLS 1.3 record drop flaws
Upgrade FearlessCMS to 0.1.3b to stop unverified Git repos from executing arbitrary PHP code
Verify Government Email Sources as TAG-193 Targets CIS Agencies
Patch Hitachi Remote Ops Agent to 2.0 to Stop Critical Account Hijack via Unrestricted Reset Codes
Patch Better Auth to 1.7.7 to Stop OAuth Account Takeover
Patch WeGIA SQLi Flaw: Critical CVE-2026-55683 Threatens Billing Data in Versions Before 3.8.6

AWS

Everything Malware Chronicle has reported about AWS: 2 stories, newest first. Part of our Cyber Attacks coverage.

15 Oct
Vulnerabilities

Upgrade s2n-tls to v1.7.6 to patch CVE-2026-16317/18 QUIC memory exhaustion and TLS 1.3 record drop flaws

AWS released a patch for two flaws in s2n-tls that allow attackers to drop encrypted records and cause memory exhaustion on QUIC servers.

12 Oct
Cyber Attacks

Act now: AWS GuardDuty merges Inspector, Macie, Hub signals into critical findings for EC2, ECS, EKS

Amazon GuardDuty now combines signals from Inspector, Macie, and Security Hub into critical-severity findings for EC2, ECS, and EKS environments.