Supply Chain
GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
The supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.
Latest
Vulnerabilities
Juniper Networks security advisory (AV26-1101)
Serial number: AV26-1101Date: October 28, 2026 As of October 28, 2026, Juniper Networks is affected by vulnerabilities in the following products: Session Smart Conductor Prior to 7.0.5 Prior to 7.1.7 Prior to 7.2.3…
Vulnerabilities
Mozilla security advisory (AV26-1100)
Serial number: AV26-1100Date: October 28, 2026 As of October 27, 2026, Mozilla is affected by vulnerabilities in the following products: Firefox Prior to 159 Firefox ESR Prior to 115.44 Prior to 153.6 Thunderbird Prior…
Vulnerabilities
Apple security advisory (AV26-1099)
Serial number: AV26-1099Date: October 28, 2026 As of October 26, 2026, Apple is affected by vulnerabilities in the following products: iOS and iPadOS Prior to 18.7.11 Prior to 26.7.2 Prior to 27.2 MacOS (Golden…
Vulnerabilities
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems…
Vulnerabilities
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems…
Phishing
AL26-028 – Ongoing Help Desk Voice Phishing Campaign Targeting Canadian Organizations
Serial number: AV26-028Date: October 28, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber…
Ransomware
Unwrapping Retail Peak Season Cyber Threats
Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust.
Vulnerabilities
Progress security advisory (AV26-1098)
Serial number: AV26-1098Date: October 28, 2026 As of October 28, 2026, Progress is affected by a vulnerability in the following product: Telerik Document Processing Libraries Prior to 2026.3.1027 The Cyber Centre…
Vulnerabilities
Oracle Corporation security advisory (AV26-1071) – Update 1
Serial Number: AV26-1071Date: October 20, 2026Updated: October 28, 2026 As of October 20, 2026, Oracle Corporation is affected by vulnerabilities in the following products: Helidon JD Edwards EnterpriseOne Configurator…
Ransomware
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Artem Stryzhak joined both gangs, which targeted businesses and a hospital during the pandemic
South Korea’s financial industry hit by fresh wave of cyberattacks
South Korea’s financial institutions have been hit by another wave of cyberattacks, highlighting the growing risk of AI-driven hacking in Asia.
Vulnerabilities
Tanium security advisory (AV26-1097)
Serial number: AV26-1097Date: October 28, 2026 As of October 27, 2026, Tanium is affected by vulnerabilities in the following products: Certificate Manager Prior to 1.17.417 Prior to 1.18.368 Prior to 1.22.119 Endpoint…
AI Takes Root in Hospital Corridors, Raises Security Stakes
Artificial intelligence is everywhere in healthcare, from doctors' intake forms to cancer screenings. But in some cases, life-and-death uses are outpacing cybersecurity.
Vulnerabilities
Veeam security advisory (AV26-1096)
Serial number: AV26-1096Date: October 28, 2026 As of October 27, 2026, Veeam is affected by vulnerabilities in the following products: Veeam Agent for Linux Prior to 13.1.2 Veeam Backup and Replication Prior to 13.0.3…
Vulnerabilities
Google Chrome security advisory (AV26-1095)
Serial number: AV26-1095Date: October 28, 2026 As of October 27, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 156.0.8078.73/.74 (Windows/Mac)…
Vulnerabilities
WatchGuard security advisory (AV26-1094)
Serial number: AV26-1094Date: October 28, 2026 As of October 27, 2026, WatchGuard is affected by vulnerabilities in the following products: Fireware OS Multiple versions Mobile VPN with SSL Client Prior to 2026.4 Prior…
Vulnerabilities
TeamViewer security advisory (AV26-1093)
Serial number: AV26-1093Date: October 28, 2026 As of October 27, 2026, TeamViewer is affected by vulnerabilities in the following products: TeamViewer Full Client & Host (Windows) Prior to 15.83 TeamViewer Full Client &…
Data Breaches
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
Vulnerabilities
Adobe security advisory (AV26-1092)
Serial number: AV26-1092Date: October 28, 2026 As of October 27, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Substance 3D Painter Prior to or equal to 12.1.5 Creative Cloud Desktop…
Lapsed US snooping law still running as senators object
FISA 702 is one of two key US laws that undermine data sovereignty and allow the US to access foreign data without the subject knowing. Senators demand release of a secret ruling
Vulnerabilities
AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497
Number: AL26-027Date: October 28, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber…
Zero-day
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300…
Cisco open sources tool for detecting AI agents on hacking sprees
Project Quarry aims to provide a 'shared language' for evaluating agent behavior
Data Breaches
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
Company chiefs believe the attackers could be the same as those who used ARTEX to breach South Korea’s financial giants
Vulnerabilities
Vulnerability in Wing FTP Server software
Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.
Vulnerabilities
Lessons from cybersecurity Black Week
A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and which generated more noise than real danger?
APT & Nation-state
ESET APT Activity Report Q2 2026–Q3 2026
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026
Austrian doctors to swap emails and phone calls for encrypted messages
Austria is following Germany’s lead by introducing a sovereign encrypted messaging service for healthcare professionals
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
Interpol's annual Operation Serengeti, now in its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds.
