Don't Get Hacked: 62 Chrome Flaws & The AI Security Crisis

Clop ransomware breached 100 organizations, including Harvard and the Washington Post, through a 9.8 Oracle E-Business Suite zero-day, and a 9.5 TianoCore EDK2 flaw lets attackers run code before the OS or Secure Boot loads on PXE-booting servers. Chrome 156 fixes 62 critical flaws found by Anthropic's Claude model, which also built a 9.8 zero-click Linux root exploit. Plus CISA sets a November 10th deadline for the 9.2 Node-to-Shell flaw, JFrog finds GitHub malware planting hooks in AI coding assistants, and Volt Typhoon rebuilds its covert router networks in under two minutes.

The hot sheet: https://blog.thehotdrop.live/blog/the-hot-drop-for-10-28-2026

0:00 Clop Breaches 100 Orgs via Oracle EBS Zero-Day
1:02 Disable PXE Boot: EDK2 Pre-Boot Flaw
3:29 Chrome 156 Patches 62 AI-Found Flaws
4:42 CISA Sets Node-to-Shell Deadline
5:22 JFrog: AI Tool Malware in GitHub
6:25 Volt Typhoon Rebuilds Covert Networks

#Cybersecurity #Ransomware #Chrome #CISA #VoltTyphoon