Daily Cyber Threat Intel Brief — 2026-10-14

Generated: 2026-10-14 08:00:51 UTC

Executive summary

Priority technology watch items

- Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935 , a high-severity authentication bypass by spoofing ( CWE-290 ) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote,…

- Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. [...]

- Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab…

- Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

- Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

- Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

- Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

- Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

- Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

- Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

- Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

- Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

- Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

- Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

- Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

- Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

- Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

- A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...]

- Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]

- Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today&#;x26;#;39;s patch Tuesday, and one is…

Newly exploited vulnerabilities / CVE watch

Ransomware and extortion trend notes

Malware / infrastructure / abuse feed highlights

IOC highlights

Defensive takeaways

Sources checked

Limitations