Loki Intelligence — Security Briefs · Published
Daily Security Brief: OpenSSH SSHole, Chrome Zero-Day, Qubole
Active exploitation of an OpenSSH flaw and a new Chrome zero-day, plus supply-chain style breaches through trusted third-party cloud access, dominate today's risk picture. Teams should prioritize patching KEV-listed and browser flaws, and review third-party cloud credentials and access paths.
Signal 01 · CISA
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation. The listed entries include GPUStack, SignalWire FreeSwitch and OpenSSH issues.
Why it matters: Check your asset inventory against the new KEV entries and patch or mitigate affected GPUStack, FreeSwitch and OpenSSH deployments on a short timeline.
Source: CISA
Signal 02 · BleepingComputer
Hackers exploit SSHole OpenSSH flaw to breach Linux systems
BleepingComputer reports active exploitation of the OpenSSH flaw dubbed SSHole (CVE-2026-123158). Reported outcomes include command execution, credential theft and persistent access on Linux systems.
Why it matters: Prioritize updating OpenSSH on internet-facing Linux hosts, and rotate credentials and review access logs on any system that may have been exposed.
Source: BleepingComputer
Signal 03 · BleepingComputer
Fireworks AI discloses new breach after cloud provider hack
AI infrastructure startup Fireworks disclosed a new breach in which attackers reached its development machines after compromising a third-party cloud provider.
Why it matters: Treat cloud providers as part of your attack surface: limit what developer machines can reach and monitor for abnormal access that originates from provider-side compromise.
Source: BleepingComputer
Signal 04 · The Hacker News
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
Google released updates fixing nine Chrome vulnerabilities, one of which is a high-severity use-after-free bug (CVE-2026-125350) already exploited in the wild. It is described as the eighth actively exploited Chrome zero-day of 2026.
Why it matters: Confirm that managed browsers on employee and build machines update to the fixed Chrome version promptly.
Source: The Hacker News
Signal 05 · The Hacker News
Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data
Wiz said an attacker accessed AWS accounts of multiple Qubole customers between October 14 and October 26, taking stored secrets and data. The attacker used credentials for an AWS account tied to Qubole's platform.
Why it matters: Audit cross-account roles and vendor-held credentials in your AWS environment, scope them to least privilege, and rotate secrets that were reachable by third-party platforms.
Source: The Hacker News
Signal 06 · BleepingComputer
The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI.
A sponsored-style piece argues AI agents are taking over routine governance, risk and compliance work. It names data literacy, agent governance and communication as key skills for GRC staff.
Why it matters: If you deploy AI agents, define ownership, permissions and review of their actions as part of your governance program.
Source: BleepingComputer
Signal 07 · The Hacker News
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
CISA added a high-severity SonicWall SonicOS vulnerability (CVE-2026-19868), described as an MFA bypass, to its KEV catalog after reports of possible real-world exploitation.
Why it matters: Apply vendor fixes to SonicOS devices, and review VPN and admin authentication logs for unexpected logins while MFA cannot be fully trusted.
Source: The Hacker News
Brief sources
Related briefs
- Hardware Hacking for Embedded Security
- How to Evaluate an AI Security Testing Provider
- What Is AI Agent Security Testing?
Relevant Loki services: Orvyn — AI agent security private preview and SKYEN web & API pentesting. Planning a test? See what a pentest costs and how a scanner, a freelancer, a pentest firm and SKYEN compare.