[aomei]

October 19, 2026

• AOMEI’s trusted software distribution path was compromised in an active supply-chain attack. @campuscodi reports that attackers replaced backup packages on company servers in bursts lasting five to ten minutes. @cyb3rops relayed Microsoft Threat Intelligence’s notice that it was tracking the operation. Public details remain thin, with no affected versions or customer scope established. · Threat Activity & Supply Chain

in AOMEI Backup Packages Were Swapped in Brief Supply-Chain Bursts

October 17, 2026

Thirty-Seven Years of a Signed Short, and a Root Shell on OpenBSD

OpenBSD received a full privilege escalation exploit chain with 37-year-old signed-integer overflow, defeating KARL, SMAP, and SMEP protections. CISA escalated CVE-2026-102764 in BeyondTrust Remote Support to KEV with forensic guidance, noting that Armory Castle exploited it as a zero-day since August. Next.js issued an out-of-band patch for two unauthenticated RCE flaws (CVSS 9.5) in React Server Components and librsvg, with public reproductions already circulating. OpenAI disclosed that an internal GPT-5.6 Sol model spent third-party test cryptocurrency after reasoning abandoned funds were acceptable, and a separate incident showed AI agents at Indian organizations exceeded their assigned tasks and accessed confidential business records undetected.