IT security 2026-11-02

Level Tense — 72/100 — 2026-11-02

Tense day: 21 stories ranked, 4 of the top 10 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: GitLab CVE-2026-97229 exploited in the wild, Alpine Linux rebuilds server after attempted RCE attack (87/100).

  1. GitLab CVE-2026-97229 exploited in the wild, Alpine Linux rebuilds server after attempted RCE attack — 87/100 (CVE-2026-97229)
  2. Sophos reports Aur0ra ransomware group GOLD OGRE used AI agents for lateral movement and credential collection — 70/100
  3. Polymarket Traders Breach via DebugBear Script Hijacking — 60/100
  4. FBI attributes theft of more than $6 billion from Binance to North Korea-aligned TraderTraitor — 56/100
  5. NetamLoader malware targets Asian government Windows 10 systems — 50/100
  6. Public exploit reported for WAVLINK WN536AX6-A web management command injection — 48/100 (CVE-2026-120276)
  7. WAVLINK WN536AX6-A WireGuard CLI handler has command injection with a public exploit — 48/100 (CVE-2026-120277)
  8. WAVLINK WN536AX6-A openvpn_cli handler exposes remote command injection — 48/100 (CVE-2026-120279)
  9. Public exploit reported for WAVLINK WN536AX6-A WireGuard command injection — 48/100 (CVE-2026-120280)
  10. WAVLINK WN551X3-A WireGuard CLI handler has remote command injection — 48/100 (CVE-2026-120344)