Signal Brief · Archived
Week of October 20, 2025
The Week's Public Record
Events
2025-10-26
vuln disclosure
CVE-2025-26692: Path Traversal in SIOS Quick Agent V2/V3 Allows Remote Code ExecutionCVE-2025-26692
A path traversal vulnerability in SIOS Quick Agent V2 and V3 allows remote unauthenticated attackers to execute arbitrary code with Windows SYSTEM privileges. The flaw stems from improper limitation of a pathname to a restricted directory. This vulnerability is critical as it enables full system compromise on hosts running the affected agent.
2025-10-23
incident
SK Shieldus Suffers Data Breach via Employee Email Account CompromiseSK Shieldus Breach
South Korean security firm SK Shieldus experienced a breach where hacker group 'Black Shurantak' claims to have stolen 24GB of internal data, posting 42 pieces of evidence on the dark web. The company has not disclosed the full scope of leaked data, causing anxiety among clients. The breach exploited a vulnerability in an employee's email account.
Every event in this brief is a record in ColdRecon's canonical set, drawn from public open-source reporting and linked to its source. This is the general, non-personalized signal — published 7 days after the fact. The live daily brief, written for your deals, is for cleared officers.