https://www.threatwire.tech/news/apache-airflow-ssh-and-sftp-providers-skip-host-key-checks-cve-2026-94134-94135ThreatWireen2026-10-19T00:32:00.000ZApache Airflow SSH and SFTP providers skip host key checks by default (CVE-2026-94134, CVE-2026-94135) https://www.threatwire.tech/news/apache-kylin-5-0-5-fixes-21-cves-including-critical-cve-2026-64959ThreatWireen2026-10-19T00:32:00.000ZApache Kylin 5.0.5 fixes 21 CVEs, including critical CVE-2026-64959 https://www.threatwire.tech/threats/plex2shell-chain-cve-2026-96652-96654-96655-96656-has-public-pocThreatWireen2026-10-19T00:14:00.000ZPlex2Shell chain (CVE-2026-96652, -96654, -96655, -96656) has a public PoC and one honeypot hit https://www.threatwire.tech/news/drupal-core-field-ui-rce-is-cve-2026-108097ThreatWireen2026-10-18T08:50:00.000ZDrupal core Field UI RCE is CVE-2026-108097: update to 11.4.10, 11.3.19 or 10.6.19 https://www.threatwire.tech/threats/opencode-console-breach-exposes-saved-ai-provider-keysThreatWireen2026-10-18T05:10:00.000ZOpenCode Console breach may have exposed saved AI provider keys https://www.threatwire.tech/research/apple-patches-exr-zero-click-bug-macos-root-flaw-and-icloud-mail-spoofingThreatWireen2026-10-17T07:44:00.000ZApple patches an EXR zero-click bug, a macOS root flaw and iCloud mail spoofing