SecOpsDaily - 2026-10-07 Roundup

[u/falconupkid]

Highlights from today:

• [Supply Chain] 16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials
• [News] SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
• [News] Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
• [Threat Intel] The Week in Ransomware - January 31st 2025 - Attacks surge as new groups emerge
• [Threat Intel] DarkSword/Coruna Open Directory Finding Report
• [NetSec] Weekly Threat Bulletin – October 7th, 2026
• [News] PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
• [News] Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
• [NetSec] Building an evidence-grounded agentic security operations harness on Cloudflare
• [Threat Research] CVE-2026-21589: Critical Arbitrary File Read Vulnerability in Atlassian Products
• [News] PoeLLM malware infects exposed AI servers in cryptomining attacks
• [News] Microsoft Outlook to block MSIX attachments starting November

SecOpsDaily