Hot Drop for 10/15/2026

An Avanti zero-day grants unauthenticated root access—and attackers are already exploiting it. Microsoft patched a record 1,413 flaws, including an actively exploited Windows Shell zero-day. What’s next? The hot sheet: https://blog.thehotdrop.live/blog/the-hot-drop-for-10-15-2026/ 0:00 Today’s teaser 0:23 Avanti Connect Secure zero-day chain 1:54 Another Avanti vulnerability under attack 3:19 Microsoft’s record Patch Tuesday 4:35 Palo Alto GlobalProtect authentication bypass 5:56 Qilin ransomware activity and Asahi data breach 7:01 curl HTTP/2 remote code execution flaw 8:37 WhatsApp attachment delivers malware 10:15 Nextcloud flaw used to drop web shells 11:40 VGhost Linux kernel flaw #Cybersecurity #ThreatIntelligence #InfoSec #ZeroDay #PatchTuesday