https://rootnotes.in/article/a-2-7-went-on-the-exploited-list-because-it-deletes-the-evidence Root Notes en 2026-10-29T11:34:45.059Z CISA put a 2.7 on its exploited list. It is a logging gap in VMware ESX, which is the one thing CVSS cannot score https://rootnotes.in/article/cisco-ssl-vpn-crash-the-hardening-is-the-precondition Root Notes en 2026-10-29T07:10:07.863Z Cisco says this firewall flaw is being exploited. You are only exposed if you turned on the extra authentication https://rootnotes.in/article/an-unreleased-model-wrote-five-exploit-chains-and-62-chrome-cves-came-out-of-it Root Notes en 2026-10-29T07:03:31.250Z An unreleased model wrote five working exploit chains. Chrome alone came out of it with 62 patched CVEs https://rootnotes.in/article/php2shell-has-victims-now-25-rooted-firewalls-and-a-tunnel-still-open Root Notes en 2026-10-29T05:54:31.966Z PHP2Shell has victims now: 25 rooted firewalls, three of them inside a government-affiliated network, and a tunnel the researchers think is still open https://rootnotes.in/article/apple-fixed-the-targeted-attack-in-september-the-oldest-iphones-waited-28-days Root Notes en 2026-10-28T10:32:13.237Z Apple fixed an exploited flaw on 28 September. The oldest supported iPhones did not get it until 26 October https://rootnotes.in/article/apple-homeview-a-camera-on-the-counter-and-two-conditions-before-it-opens Root Notes en 2026-10-28T10:18:17.093Z Apple put a camera and a microphone on the kitchen counter. The interesting part is the two conditions before it shows you anything personal https://rootnotes.in/article/apple-m6-macs-every-speed-claim-has-a-different-baseline Root Notes en 2026-10-28T10:11:40.790Z Apple's M6 Macs arrive on 6 November. Every speed claim is relative, and the machine it is relative to changes per product https://rootnotes.in/article/44-agents-came-from-one-log-line-and-the-way-in-was-a-default-password Root Notes en 2026-10-28T10:11:23.762Z The 44 AI agents everyone is quoting come from one log line. The way into those networks was a default password https://rootnotes.in/article/warp-lost-agent-traces-and-nobody-will-say-what-is-in-them Root Notes en 2026-10-28T09:41:37.289Z Warp says a vendor breach took agent trace data. Nobody has said what an agent trace contains, and that is the whole question https://rootnotes.in/article/polyshell-adobes-bulletin-still-says-it-knows-of-no-exploits Root Notes en 2026-10-28T07:34:08.892Z CISA says the Magento upload flaw is being exploited. Adobe's bulletin for it still says the company knows of no exploits https://rootnotes.in/article/yootheme-pro-10-the-scanner-drops-the-shell-and-a-person-follows Root Notes en 2026-10-28T07:07:30.315Z A 10.0 in a Joomla and WordPress template is being exploited by a scanner, with a human operator two minutes behind it https://rootnotes.in/article/brotli-is-on-the-catalogue-and-the-entry-names-a-library Root Notes en 2026-10-28T06:30:47.054Z CISA put the Brotli decoder bug on its catalogue. The entry names a library, not a product, and that is the whole problem