Security NEXT has released its ranking of the ten most-read cybersecurity articles published between October 25 and October 31, 2026. The list reflects reader interest in newly disclosed vulnerabilities, vendor patches, and confirmed exploitation activity.
The top story covered Microsoft issuing an out-of-band security update for .NET that resolves multiple issues, including problems in Brotli decompression handling. Second place went to Google Chrome, which addressed 52 vulnerabilities, four rated critical.
Third on the list was a joint advisory from US authorities confirming active exploitation of flaws in the Linux kernel and VMware ESX. Additional notable entries included a newly discovered PHP vulnerability with limited affected environments, the release of Apple iOS 27.2 that patches previously exploited issues, and ten vulnerabilities in Node.js that could lead to remote code execution via Brotli data processing.
Further articles in the ranking discussed confirmed exploitation of the PHP2Shell vulnerability, eight issues in Apache Tomcat including critical-rated flaws, an update for the Windows version of PHP that refreshes the bundled Brotli library, and a Google Brotli decoder vulnerability with potentially broad impact across environments.
