Patch/Configuration Management

Microsoft released an out-of-band update for the critical deserialization flaw.

Security pros say teams that build apps in python-socket.io should patch right away.

Updates have been issued by TP-Link for four serious vulnerabilities impacting its Omada gateway devices, according to BleepingComputer.

Five new security flaws impacting Oracle, Microsoft, Apple, and Kentico offerings have been included in the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog, with federal agencies urged to remediate the issues by Nov. 10, The Hacker News reports.

Envoy Air is the second organization confirmed to have been exposed to Clop attacks.

BleepingComputer reports that updates have been issued by Gladinet for a local file inclusion flaw impacting its CentreStack business solution, tracked as CVE-2025-11371, which has been leveraged in zero-day intrusions since late September.

Intrusions with Cisco SNMP bug facilitate Linux rootkit deployment Older Linux systems have been compromised with rootkits in attacks involving the exploitation of a high-severity Cisco IOS and IOS XE Simple Network Management Protocol vulnerability, tracked as CVE-2025-20352, part of the Operation Zero Disco campaign, reports Security Affairs.