Nov 4: CISA confirms active exploitation of WordPress core flaw during software upgrades
CISA has confirmed that attackers are exploiting a WordPress core flaw during software upgrades, with federal agencies due to patch by November 6, so check your WordPress estate now; meanwhile Node-RED is being exploited in the wild and AI-assisted intrusion tooling keeps showing up in real incidents.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.