https://threatvectr.com/story/a-critical-flaw-in-aristas-velocloud-orchestrator-is-being-exploited-in-the-wild ThreatVectr en 2026-10-23T19:40:00.319Z A critical flaw in Arista's VeloCloud Orchestrator is being exploited in the wild https://threatvectr.com/story/a-new-bootkit-called-blackx-is-hitting-diplomats-and-it-slips-past-secure-boot ThreatVectr en 2026-10-23T19:24:00.203Z A new bootkit called BlackX is hitting diplomats, and it slips past Secure Boot https://threatvectr.com/story/pillow-flaw-lets-a-filename-hijack-python-image-servers ThreatVectr en 2026-10-23T10:43:00.541Z Pillow Flaw Lets a Filename Hijack Python Image Servers https://threatvectr.com/story/critical-brotli-flaw-lets-attackers-run-code-on-nodejs-servers ThreatVectr en 2026-10-23T08:12:00.844Z Critical Brotli Flaw Lets Attackers Run Code on Node.js Servers https://threatvectr.com/story/php2shell-the-patch-gave-attackers-their-roadmap ThreatVectr en 2026-10-23T01:49:00.758Z PHP2Shell: The Patch Gave Attackers Their Roadmap https://threatvectr.com/story/silentransomgroup-claims-attack-on-kirkland-and-ellis-one-of-the-worlds-largest ThreatVectr en 2026-10-23T01:05:00.723Z Silentransomgroup Claims Attack on Kirkland & Ellis, One of the World's Largest Law Firms https://threatvectr.com/story/qilin-ransomware-gang-claims-attack-on-colorado-restaurant-equipment-supplier ThreatVectr en 2026-10-23T00:56:00.035Z Qilin Ransomware Gang Claims Attack on Colorado Restaurant Equipment Supplier https://threatvectr.com/story/stolen-updraftcentral-keys-turn-into-a-wordpress-backdoor-spree ThreatVectr en 2026-10-23T00:42:00.035Z Stolen UpdraftCentral keys turn into a WordPress backdoor spree https://threatvectr.com/story/siemens-flags-428-flaws-in-a-factory-controller-that-still-has-no-fix ThreatVectr en 2026-10-22T19:08:00.793Z Siemens flags 428 flaws in a factory controller that still has no fix https://threatvectr.com/story/siemens-building-controllers-carry-four-flaws-that-let-strangers-crash-them-from ThreatVectr en 2026-10-22T18:58:00.063Z Siemens building controllers carry four flaws that let strangers crash them from the internet https://threatvectr.com/story/litellms-release-pipeline-was-hijacked-for-two-hours-and-shipped-a-credential ThreatVectr en 2026-10-22T09:39:00.223Z LiteLLM's Release Pipeline Was Hijacked for Two Hours and Shipped a Credential Stealer https://threatvectr.com/story/ransomware-group-n0n-claims-attack-on-heritage-senior-living ThreatVectr en 2026-10-22T00:57:00.171Z Ransomware Group N0n Claims Attack on Heritage Senior Living https://threatvectr.com/story/ahold-delhaize-pulled-systems-offline-after-a-cyberattack-hit-stores-across-the ThreatVectr en 2026-10-22T00:38:00.731Z Ahold Delhaize pulled systems offline after a cyberattack hit stores across the US and Europe https://threatvectr.com/story/970000-medi-cal-members-data-exposed-after-paradigm-healthcare-breach-sat ThreatVectr en 2026-10-22T00:33:00.352Z 970,000 Medi-Cal Members' Data Exposed After Paradigm Healthcare Breach Sat Unreported for Nearly a Year