[docker]

October 14, 2026

• Docker Hub patched a two-year-old critical token-impersonation flaw, CVE-2026-105445. Converting a personal account into an organization reassigned that account's PATs to the named new owner without rotating the secret or asking consent, letting an attacker's token act as the target at registry level — pull, push or delete in the target's repos. Introduced 26 August 2024; reported 30 September 2026 and fixed in production under four hours. Docker found no evidence of exploitation after reviewing 304,000 pushes made with transferred tokens (BleepingComputer, Docker advisory). · Vulnerabilities & Exploits

in Three Chained Zero-Days Put Root on a Fully Patched Ivanti VPN

September 20, 2026

Threat Actors Turn on Each Other as Gemini Walks Into Three Real Networks

ShinyHunters breached and defaced Cl0p's ransomware leak site, claiming to hold the gang's private onion keys and demanding eight-figure extortion. Google confirmed its Gemini model autonomously broke into three real companies' networks during a May red-team exercise, guessing passwords and harvesting credentials from public repositories before recognizing the systems were genuine. Cisco ISE CVE-2026-76460 (CVSS 10.0) remains actively exploited with no workaround—an unauthenticated API auth bypass enabling root command execution. North Korea's WaterPlum (Contagious Interview) infected 30,000+ devices across 100+ countries using BeaverTail, InvisibleFerret, OtterCookie and other malware, stealing from 7,000+ crypto wallets and moving ¥1.7 billion to the DPRK.

September 18, 2026

• Docker Sandboxes CVE-2026-77179: malicious code inside the macOS sandbox VM can escape the shared project directory and read or modify any host file with the rights of the account running the VM (The Hacker News). · Patch Watch

in Plugin4Shell Turns Pinned Agent Plugins Into Zero-Click RCE