Android “SMS of Death” Vulnerability Could Crash Phone Services Through Crafted Messages

598/69 Monday, November 2, 2026 Researchers have disclosed CVE-2026-58882, a vulnerability in Android’s telephony system referred to as “SMS of Death.” An attacker who knows a target’s phone number can send a specially crafted WAP Push message that causes the com.android.phone process to crash, temporarily disrupting cellular connectivity and terminating active calls. No user interaction […]

ThaiCERT

November 2, 2026

Attackers Chain Three Ivanti Connect Secure Vulnerabilities to Gain Root Access

597/69 Monday, November 2, 2026 CISA added two security vulnerabilities affecting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026, after confirming that they had been exploited in the wild. The first, CVE-2026-111357 (CVSS 8.8), is a Missing Authentication for a Critical Function vulnerability that could allow an authenticated […]

ThaiCERT

November 2, 2026

NetamLoader Malware Targets Windows 10 Systems Used by Government Agencies in Asia Through .NET Injection

596/69 Monday, November 2, 2026 Cybersecurity researchers from Kaspersky have disclosed a sophisticated campaign targeting government organizations in Asia. The attacks use a newly identified malware framework named NetamLoader to compromise specially customized Windows 10 systems deployed within government environments. Researchers believe the activity may be related to a supply chain attack, in which threat […]

ThaiCERT

November 2, 2026