InfoSecBulletin Cybersecurity for mankind
During the past seven days (week) , security researchers and organizations tracked a total of 1,615 vulnerabilities requiring immediate triage and context. The severity distribution for these threats highlights a significant volume of high-risk entries that security teams must prioritize.
.
Vulnerability Severity Breakdown:
The following breakdown categorizes the week‘s vulnerabilities according to their CVSS scores:
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
Daily Cyber security update for 26.10. 2026
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Critical (CVSS 9.0–10.0): 130 vulnerabilities
High (CVSS 7.0–8.9): 515 vulnerabilities
Medium (CVSS 4.0–6.9): 530 vulnerabilities
Low (CVSS 0.1–3.9): 44 vulnerabilities
Unknown/Pending: 395 vulnerabilities currently awaiting final classification
The data indicates that over 40% of the triaged vulnerabilities this week are classified as either High or Critical severity, necessitating robust patching and mitigation strategies.
