Cybersecurity Weekly Intelligence Brief — week ending 2026-11-02
10 incidents disclosed · 360 stories reviewed · 18 critical · 5 newly exploited vulnerabilities
Summary
10 incidents were disclosed in the last seven days. The largest is AfD, with 345,439 records affected. CISA added 5 flaws to its list of those used in attacks. On the compliance side, a Treasury Department rule takes effect on 5 November 2026.
Every item below links to its record. Times are UTC.
Top 5 incidents
- 1Revolve Group, Inc. disclosed a cybersecurity incident
SEC EDGAR · 30 Oct
- 2AfD: a data breach
345,439 recordsHave I Been Pwned · 27 Oct
- 3Bangkok Bank PCL - New York Branch: a data breach
California Attorney General · 29 Oct
- 4Del Monte Foods Corporation II Inc.: a data breach
California Attorney General · 29 Oct
- 5Troutman Pepper Locke LLP: a data breach
California Attorney General · 28 Oct
Top 5 exploited vulnerabilities
- 1GitLab Community Edition and Enterprise Edition10.0Critical
CVE-2026-97229· added 29 Oct
- 2Adobe Commerce and Magento9.3Critical
CVE-2026-48356· added 27 Oct
- 3Ivanti Connect Secure7.0High
CVE-2026-111357· added 30 Oct
- 4Linux Kernel7.8High
CVE-2026-46300· added 28 Oct
- 5Ivanti Connect SecureNot scored yet
CVE-2026-118527· added 30 Oct
Compliance
Treasury Department · US
Technical details
For each item above: what happened, how an attacker reaches the flaw, the chance of attack, what CISA or the regulator says to do and by when, and the official record.
Fastnexa security experts
Which of these actually affect your company?
Send us what you run and a Fastnexa security expert will tell you which items in this briefing matter for you, and what to fix first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →