Skip to content

Daily brief

Sunday 18 Oct 2026

1 reported exploited and not on CISA's list, 3 supply chain compromises.

Reported exploited, not on CISA's list yet

CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityEG Secure Solutions SiteGuard Server Edition · High 7.8 · CISA: check for compromise · Federal deadline 2026-10-23 · Zero-day reported by 3 outlets, first by Bluesky: zero-day

Supply chain compromises

Malicious release leakdeep 2.6.4, 2.5.0, 2.6.6 on PyPI was a malicious releaseleakdeep 2.6.4, 2.5.0, 2.6.6, 2.5.2, 2.6.0, 2.4.1, 2.4.5, 2.6.2, 3.0.0
Malicious release @pkgship/frpc-linux-arm64 0.71.0 on npm was a malicious release@pkgship/frpc-linux-arm64 0.71.0
Malicious release rootaccessxvv-bbmarker 1.0.2 on npm was a malicious releaserootaccessxvv-bbmarker 1.0.2

10-24 10-23 10-22 10-21 10-20 10-19 10-18 10-17 10-16 10-15 10-14 10-13 10-12 10-11 Atom feed JSON