Thursday, October 29, 2026
Your Linux servers have a Halloween deadline
Good morning. On this day in 1969, the first computer-to-computer link went live on ARPANET, the network that grew into the internet. Fifty-seven years later, we're still patching it.
- CISA gives a Linux kernel bug a Halloween deadline
- Reuters: Chinese AI labs trained on OpenAI's model
- Amazon trims its devices team
Presented by Cyhornet - Need a plan for the day an attacker gets root? Cyhornet's security and GRC services can help: cyhornet.com
TOP STORY
PATCH NOW
A Linux bug gets a Halloween deadline
CISA added two flaws to its KEV catalog on October 28. The bigger one is CVE-2026-46300, a Linux kernel bug that CISA says can be chained with the two PHP2Shell flaws to plant PHP webshells and run commands as root. Federal agencies must fix it by October 31 and follow CISA's forensic triage steps. The second, CVE-2026-41709 in VMware ESX, lets someone with admin access perform some actions without being logged; its deadline is November 11. Security firm Dream claimed one attack chain using the kernel bug rooted 25 servers, including systems in a US government-affiliated environment. The Next Web said it has not verified that claim.
Why it matters: Update your Linux kernels and PHP today, then check your web folders for files you didn't put there.
Sources: CISA | The Next Web
QUICK HITS
AI AT WORK
Copy, paste, train. Chinese AI labs DeepSeek and Moonshot AI leaned heavily on outputs from OpenAI's GPT-6 Astra to train their newest models, Reuters reported, citing The Information. The practice is called distillation.
What to do: Read the terms of the AI tools your team uses to see who can reuse your outputs. Reuters via Investing.com
CHIP DEALS
OpenAI shops at Google. OpenAI plans to buy Google's AI chips, The Information reported, according to Reuters. OpenAI declined to comment.
What to do: Keep at least two AI vendors on your shortlist so one partnership doesn't lock you in. Reuters via BusinessLine
CAREER WATCH
Amazon trims devices. Amazon cut jobs in its devices and services unit on Wednesday, Reuters reported. A spokesperson confirmed "a small number of roles" were eliminated.
What to do: Update your resume this week, even if your job feels safe. Reuters via Investing.com
WORTH YOUR MONEY
Check your mailbox. The FTC is sending 65,022 checks totaling more than $9.8 million to people who made eligible Walmart money transfers between January 2015 and December 2024, USA Today reported. No claim is needed. Cash yours within 90 days. USA Today
TODAY'S LEARNING
The Digital Government Institute hosts a free webinar, "AI-Powered Cyber Operations: Strengthening Federal Defense in Real Time," today from 1:00 to 2:00 PM ET. Earn up to 1.0 CPE credit. Register