The Security Round-up
A weekly digest of what attackers are already using: actively exploited CVEs, misconfigurations and supply-chain compromises, each with the check and the fix.
The Security Round-up is a weekly list of the flaws attackers are already using: additions to CISA's Known Exploited Vulnerabilities catalog, plus the misconfigurations and supply-chain compromises that never got a CVE number. Ordered by what gets an attacker furthest, not by severity score.
Every entry carries the check and the fix: what the flaw allows, the version that closes it, and the command that tells you which build you are running. Where a flaw cannot be tested without exploiting it, the entry says so and gives the version comparison instead.
Issues
- 10–30 October 2026 — Ivanti Connect Secure, GitLab, PHP, OVHcloud CLI and six more.