Back to Threat Feed
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Port & Service
Published on November 2, 2026 at 04:57 PM

⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

A weekly cybersecurity recap highlighted a record-breaking $6.43 billion cryptocurrency theft from Binance attributed to the North Korean threat group TraderTraitor across multiple blockchains. The report also detailed numerous high-severity vulnerabilities affecting public and enterprise infrastructure, including remote code execution flaws in TightVNC, WatchGuard Fireware OS, Apache Tomcat, and GoAhead. Security teams are advised to prioritize patching exposed services to prevent unauthorized access.

Source: The Hacker News

How Mangudai Discovers This Issue

Mangudai's port module detects internet-facing services such as TightVNC and Apache Tomcat by scanning open ports, capturing service banners, and identifying advertised software versions associated with reported vulnerabilities.

Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.
Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.

Check what your own domain exposes

A free scan lists the services, software versions, certificates and headers your domain shows to the internet, so you can see whether a flaw like this could apply to you. It reads what is visible from the outside; it does not confirm that a specific vulnerability can be exploited.

© 2026 Mangudai ASM. All rights reserved.