Hot Drop for 10/15/2026

An Avanti zero-day grants unauthenticated root access—and attackers are already exploiting it. Microsoft patched a record 1,413 flaws, including an actively exploited Windows Shell zero-day. What’s next?

The hot sheet: https://blog.thehotdrop.live/blog/the-hot-drop-for-10-15-2026/

0:00 Today’s teaser

0:23 Avanti Connect Secure zero-day chain

1:54 Another Avanti vulnerability under attack

3:19 Microsoft’s record Patch Tuesday

4:35 Palo Alto GlobalProtect authentication bypass

5:56 Qilin ransomware activity and Asahi data breach

7:01 curl HTTP/2 remote code execution flaw

8:37 WhatsApp attachment delivers malware

10:15 Nextcloud flaw used to drop web shells

11:40 VGhost Linux kernel flaw

#Cybersecurity #ThreatIntelligence #InfoSec #ZeroDay #PatchTuesday