We are watching “ordinary” web and collaboration components turn into incident accelerators. The scary part is not the exploit, it is how many orgs quietly run the vulnerable thing as a sidecar.

Today's Top 5

1. 18M files from AI aggregator: A researcher report says an AI aggregation service exposed terabytes of customer content, including chat records and business documents. The awkward question is what else was in those “private” uploads. Source
2. 11.7M Capcom accounts hit: Capcom confirmed a breach affecting millions of accounts, with email and account metadata involved. Watch the downstream: credential stuffing, fake “account recovery” lures, and targeted gamer-to-employee pivoting. Source
3. KEV: Nextcloud Collabora RCE: CISA added an exploited Collabora Online Built-in CODE Server flaw used inside Nextcloud. If your document server ever restarts at the wrong time, proxy.php can become the attacker’s shell. Source
4. KEV: Arista VeloCloud exploited: A critical VeloCloud Orchestrator vulnerability is listed as exploited in the wild, with urgent version cutoffs. This is the kind of edge control-plane weakness that becomes a full network story fast. Source
5. GitLab regex RCE PoC lands: Public PoC work continues for a GitLab unauthenticated RCE tied to its bundled regex engine. The fun part is that you can patch “the earlier 10.0” and still be exposed to the newer 10.0. Source

Why today matters: The top stories split into two buckets, “your customers’ identity data” and “your control planes.” Both get weaponized the same way: attackers move from low-friction access to high-trust actions, then monetize with extortion, fraud, or quiet persistence. CISOs with sprawling self-hosted stacks and lots of SaaS connectors should be the most nervous.

XERJ Corpus Hub: If CVE-2026-110447 (Collabora in Nextcloud) is in your fleet, an AI agent loading checkov can quickly draft a focused IaC review checklist to spot risky Nextcloud deployment patterns (public ingress, weak segmentation, overbroad volumes), then map them to preventable misconfig classes. Browse more at hub.xerj.org.

Now, the rest of what you should not let slide before Monday.

Data Breaches

1. Capcom confirms account data breach affecting ~11.7M accounts: Capcom said account information was accessed and some accounts had passwords changed, while it did not confirm customer-set passwords were leaked. Expect phishing waves posing as Capcom support and “security verification” prompts. Source: PC Gamer
2. AI aggregator exposure leaks 18M+ files and chat records: Cybernews researchers reported an unsecured dataset containing large volumes of user and corporate content, including audio and video. Treat this as a reminder that “AI tools” often become shadow DLP bypasses. Source: TechRadar
3. and ST HD (Adastria group) reports unauthorized access and possible leak: The Japanese retail group disclosed suspected exposure tied to a server intrusion and ongoing service impacts. The operational disruption angle matters as much as the data. Source: ITD
4. Studio.Design unauthorized access notice (site builder platform): Studio reported an incident where a third party exploited a feature vulnerability and made data accessible externally. If you embed customer forms and API keys in site-builder workflows, assume spillover risk. Source: Studio

Security Research

1. CISA adds exploited Collabora Nextcloud RCE to KEV: Reporting highlights real-world exploitation conditions for proxy.php when the local CODE server is not running, and the urgency of upgrading the built-in app. Expect broad scanning of Nextcloud endpoints. Source: The Hacker News
2. GitLab CVE-2026-110264 PoC and reproducible labs published: Public research packages include PoC and fingerprinting details that help defenders validate exposure, but also shorten attacker timelines. If you self-host GitLab, assume internet noise will spike. Source: GitHub
3. MindsDB BYOM unauthenticated RCE assigned CVE-2026-7711: Research points to a path where uploaded Python can be executed without authentication in certain configurations. This is a textbook “ML platform meets supply chain” failure mode. Source: ThreatWire
4. AWS telemetry: exploitation attempts before PHP2Shell disclosure: AWS described MadPot observations of exploitation attempts days before the public disclosure of the critical PHP bugs, implying leak or pre-disclosure access to exploit details. This is your signal to treat embargoes as best-effort, not safety. Source: TechRadar
5. Atlantic: “Black October” normalization risk: A broader analysis piece frames the last few days as a preview of an era where widely deployed components are constantly under AI-assisted discovery pressure. It is not the headline incidents, it is the cadence. Source: The Atlantic

Top CVEs

1. CVE-2026-110447: Collabora Online Built-in CODE Server (Nextcloud app richdocumentscode) OS command injection that can allow remote code execution in certain conditions (notably when the CODE server is not running). It is listed as exploited in the wild. Source
2. CVE-2026-114625: Arista VeloCloud Orchestrator (on-prem) SQL injection that can allow remote attackers to access privileged internal functionality and impact the host. Arista indicates exploitation in the wild and multiple national advisories echo the urgency. Source
3. CVE-2026-110264: GitLab CE/EE integer overflow in the bundled regular expression compiler (Onigmo) that can lead to unauthenticated remote code execution under certain conditions. Public PoC material is circulating, so upgrade windows shrink. Source
4. CVE-2026-7711: MindsDB BYOM unauthenticated RCE path where uploaded Python can be executed without authentication depending on deployment configuration. If you run ML orchestration platforms, treat this as a high-value lateral move opportunity. Source
5. CVE-2026-45447: OpenSSL PKCS#7/S/MIME verification use-after-free involving specially crafted signed messages with an empty digestAlgorithms field. This one lives in email and document processing edges, which is exactly where attackers like to camp. Source

Podcasts & Talks

1. Darknet Diaries EP 181: Ricky: A story about phone service loss and the uncomfortable reality of how fragile mobile connectivity can be. CISOs should care because “no service” becomes “no MFA,” “no incident comms,” and “no customer support” fast. Listen: Darknet Diaries
2. Security Now #1101 (Oct 20, 2026): ECDSA curve origins and “When AI Becomes the Attacker.” The episode is a useful board-level narrative bridge between cryptography trust debates and the current AI-assisted exploit cycle. Listen: TWiT
3. SANS Stormcast (Oct 23, 2026): A tight daily rundown touching PHP2Shell exploitation status and related patch pressure. Good for keeping your SOC leads synced on what is actually getting probed today. Listen: Podfollow

Final Words

Today’s uncomfortable pattern is that “supporting” systems are now the primary blast radius. Document servers, orchestrators, site builders, AI aggregators, and the identity glue between them. Attackers do not need creativity when they can pick one weak junction and inherit your trust graph.

This week, do three things:

• Patch Nextcloud deployments that use Collabora Built-in CODE Server for CVE-2026-110447, and add a temporary WAF rule or block external access to the richdocumentscode proxy endpoint until confirmed fixed.
• Upgrade self-managed GitLab for CVE-2026-110264, then review unauthenticated endpoints that trigger file rendering and regex compilation paths, because “public project” often equals “public exploit surface.”
• For Arista VeloCloud Orchestrator, validate you are on fixed versions for CVE-2026-114625, and audit portal accounts with low privileges, because this bug turns “read-only” into “operator.”

Your turn: If a vendor told you today that an exploited bug only triggers “when the service is not running,” do you treat that as reassuring, or as a guarantee you will hit the condition during your next maintenance window? Hit reply with your take, or drop a comment on the web version. I read every reply.

Know someone running a self-hosted Nextcloud with the built-in Collabora app because it was “easy”? Forward them this issue, it costs 30 seconds and the alternative costs a rebuild. For forwarded and web readers, subscribe free at secretciso.org.

Stay vigilant, stay informed, and see you in the next edition of Secret CISO!