OUTPOSTEdition 220 — 22 October 2026
Cyber, warfare technology and geopolitics as compiled on 22 October 2026.
Cyber
Breaches, campaigns, advisories and research.
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks (opens the original article)
Arista released updates for an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator On-Prem deployments.
Cyber BleepingComputer 2 outlets
What to checkCheck for affected On-Prem deployments and apply the security updates.
Amazon says PHP2Shell exploitation began 4 days before patches (opens the original article)
Amazon Threat Intelligence says attackers targeted PHP2Shell flaws four days before security patches were released.
Cyber BleepingComputer 2 outlets
What to checkCheck for PHP2Shell exposure and apply available patches.
Siemens SIMATIC S7 Webserver API (opens the original article)
A CISA advisory says the .NET Client Library for the SIMATIC S7 Webserver API contains multiple vulnerabilities.
Cyber CISA Advisories
What to checkCheck whether your environment uses the library and review the advisory.
Sources1CISA Advisories
Siemens APOGEE, TALON and Desigo PXC/PXM Products (opens the original article)
A CISA advisory says Siemens APOGEE, TALON and Desigo PXC/PXM products contain vulnerabilities that could allow an attacker to cause an unspecified effect.
Cyber CISA Advisories
What to checkIdentify affected products and consult the advisory for mitigation guidance.
Sources1CISA Advisories
Siemens RUGGEDCOM CROSSBOW (opens the original article)
A CISA advisory says RUGGEDCOM CROSSBOW contains vulnerabilities that could allow an attacker to execute something; the snippet does not specify what.
Cyber CISA Advisories
What to checkCheck for RUGGEDCOM CROSSBOW and review the advisory before deciding on mitigations.
Sources1CISA Advisories
Siemens RUGGEDCOM APE1808 Devices (opens the original article)
A CISA advisory about Siemens RUGGEDCOM APE1808 Devices says Nozomi Networks published information on vulnerabilities in Nozomi Guardian/CMC.
Cyber CISA Advisories
What to checkCheck whether Nozomi Guardian/CMC is in use and consult the advisory.
Sources1CISA Advisories
Siemens Industrial Edge App Publisher (opens the original article)
A CISA advisory says Siemens Industrial Edge App Publisher contains a vulnerability chain involving improper certificate handling.
Cyber CISA Advisories
What to checkReview certificate handling in the affected product and consult the advisory.
Sources1CISA Advisories
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (opens the original article)
A CISA advisory says multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP.
Cyber CISA Advisories
What to checkCheck whether the listed CPU is deployed and review the advisory.
Sources1CISA Advisories
Siemens WinCC (opens the original article)
A CISA advisory says multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability.
Cyber CISA Advisories
What to checkCheck affected WinCC versions and review database privilege controls.
Sources1CISA Advisories
Siemens Industrial Edge Device Kit (opens the original article)
A CISA advisory tells users of Industrial Edge Devices to consult the respective security advisories.
Cyber CISA Advisories
What to checkFind the relevant advisory for each Industrial Edge Device in use.
Sources1CISA Advisories
Warfare
Drones, electronic warfare, missiles and defence systems.
Pentagon, Lockheed agree to decade-long F-35 framework deal for hundreds of jets (opens the original article)
The Pentagon and Lockheed agreed to a tentative F-35 framework covering production and sustainment over the next 10 years; lawmakers must still approve it.
Warfare Breaking Defense 2 outlets
Why it mattersThe framework concerns long-term fighter production and sustainment.
USAF Confirms Bombers Could Have A Major Air-To-Air Combat Role (opens the original article)
The War Zone reports that the USAF sees bombers as a potential air-to-air asset, alongside expanding the fighter fleet and establishing a CCA force.
Warfare The War Zone
Why it mattersA possible air-to-air role could affect how bombers contribute to combat operations.
Sources1The War Zone
Four KJ-3000 Radar Jets At Chinese Factory Point To Serial Production (opens the original article)
The War Zone says four KJ-3000 radar jets at a Chinese factory point to serial production. It describes the aircraft as China’s most capable airborne early warning and control aircraft.
Warfare The War Zone
Why it mattersThe aircraft fleet’s expansion is relevant to airborne surveillance and control capabilities.
Sources1The War Zone
Space Force shifts into high gear on cislunar warfare, with RFIs coming soon (opens the original article)
Breaking Defense reports that the Space Force wants to field cislunar capabilities by the end of fiscal 2029, according to Gen. Stephen Purdy.
Warfare Breaking Defense
Why it mattersCislunar capabilities extend military planning into the space between Earth and the Moon.
Sources1Breaking Defense
Brothers in Arms, Partners in Healing: A Story about a Breakthrough in Treating Post-Traumatic Stress (opens the original article)
War on the Rocks tells the story of veterans Jeff Lindquist and Erik Won, and an innovative technology that helped Lindquist reclaim his life after post-traumatic stress.
Warfare War on the Rocks
Why it mattersThe story highlights technology's role in treating post-traumatic stress among veterans.
Sources1War on the Rocks
Ground-Launched Rusty Dagger Low-Cost Cruise Missile Seen For The First Time (opens the original article)
The War Zone reports the first public look at the Rusty Dagger low-cost cruise missile in a surface-launched configuration, as its manufacturer expands production.
Warfare The War Zone
Why it mattersA surface-launched configuration and expanding production are relevant to missile deployment and availability.
Sources1The War Zone
A-4 ‘Super’ Skyhawks Playing The Bad Guys In European Skies (opens the original article)
The A-4 Skyhawk continues to fly red-air aggressor missions in Europe, according to The War Zone.
Warfare The War Zone
Why it mattersThe aircraft’s continued use highlights the role of aggressor platforms in training against simulated adversaries.
Sources1The War Zone
Winning the information war through ideas and perception (opens the original article)
A sponsored article says social media and AI amplify disinformation campaigns and argues that countering them requires a coordinated response.
Warfare Breaking Defense
Why it mattersCoordination is presented as relevant to countering information campaigns amplified by social media and AI.
Sources1Breaking Defense
Geopolitics & geodata
Strategy, geo wars, GNSS and satellite security.
Hegseth Could Face Impeachment if Democrats Win in November (opens the original article)
Foreign Policy reports that one lawmaker laid out a case for indicting the defense secretary and that Hegseth could face impeachment if Democrats win in November.
Geopolitics Foreign Policy
Strategic relevanceThe prospect of impeachment connects domestic political outcomes with defense leadership.
Sources1Foreign Policy
Trump says Musk has restored Ukraine's access after Starlink row (opens the original article)
The BBC reports that Trump says Musk restored Ukraine’s access after a Starlink dispute. It says Ukraine relies on Starlink for military uses, while Musk has denied restricting access.
Geopolitics BBC World
Strategic relevanceUkraine’s reliance on Starlink makes access to the service strategically relevant to its military.
Sources1BBC World
Tannebaum interviewed on CNBC’s Squawk Box about the implications of the US-Russia diesel deal (opens the original article)
The Atlantic Council says Tannebaum discussed the implications of the US-Russia diesel deal on CNBC’s Squawk Box.
Geopolitics Atlantic Council
Strategic relevanceThe deal connects US-Russia relations with diesel trade.
Sources1Atlantic Council
Lichfield quoted in Semafor on lasting ceasefire between Russia and Ukraine (opens the original article)
The Atlantic Council says Lichfield was quoted in Semafor on a lasting ceasefire between Russia and Ukraine.
Geopolitics Atlantic Council
Strategic relevanceA lasting ceasefire bears on the course of the Russia-Ukraine conflict.
Sources1Atlantic Council
Fried quoted in The New Yorker article on Trump’s surprise pivot towards Russia (opens the original article)
The Atlantic Council says Fried was quoted in The New Yorker on Trump’s surprise pivot towards Russia.
Geopolitics Atlantic Council
Strategic relevanceThe pivot is relevant to US relations with Russia.
Sources1Atlantic Council
Netanyahu Calls on Israel to Overthrow Iranian Regime (opens the original article)
Foreign Policy reports that Netanyahu called for overthrowing Iran’s regime as Israel prepares for an election and fresh joint strikes on Iran.
Geopolitics Foreign Policy
Strategic relevanceThe reported call and preparations for joint strikes are relevant to regional security dynamics.
Sources1Foreign Policy
Lichfield quoted in Foreign Policy article on the longevity of European support for Ukraine’s defense (opens the original article)
The Atlantic Council says Lichfield was quoted in Foreign Policy on how long European support for Ukraine’s defense may last.
Geopolitics Atlantic Council
Strategic relevanceThe longevity of European support is strategically relevant to Ukraine’s defense.
Sources1Atlantic Council
The US-Israel relationship needs a reset. Here’s how to do it. (opens the original article)
The Atlantic Council argues that a new Israeli government could offer a chance to reset strained relations with Washington.
Geopolitics Atlantic Council
Strategic relevanceThe US-Israel relationship is strategically relevant to both countries.
Sources1Atlantic Council
| CVE | CVSS | Product | Ransomware | Added / due | Required action |
|---|---|---|---|---|---|
| CVE-2026-106931 | 8.5High | EG Secure Solutions SiteGuard Server Edition | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-96656 | 8.6High | Plex Media Server | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-96655 | 5.3Medium | Plex Media Server | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-96654 | 6.9Medium | Plex Media Server | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-96652 | 5.3Medium | Plex Media Server | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-110936 | 8.4High | Siemens Software Center | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-102764 | 9.3Critical | BeyondTrust Remote Support | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2025-61624 | 6.0Medium | Fortinet Multiple Products | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-21589 | 9.3Critical | Atlassian Multiple Products | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-105134 | 9.3Critical | Ahsay AhsayCBS | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-76519 | 9.8Critical | Cisco Secure Email Gateway | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-105133 | 5.5Medium | Ahsay AhsayCBS | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
Source: CISA KEV catalogue; CVSS scores from NVD where published. “No score” means NVD has not scored it yet.
Keyword index
Counted from this page. Select one to filter.