Oracle's October 2026 Update Tackles Over 1,200 Security Flaws
PremiumOracle's October CPU fixes over 1,200 flaws including nearly 100 critical issues, predominantly in Fusion Middleware.
Friday, October 23
QPACK Flaws Expose HTTP/3 Servers to Memory Amplification Attacks
PremiumFoxIO disclosed QPACK vulnerabilities that let remote unauthenticated attackers crash HTTP/3 servers via massive memory amplification.
Urgent Security Update: Arista Addresses Critical Zero-Day Flaw in VeloCloud Orchestrator
PremiumArista released patches for an actively exploited zero-day in VeloCloud Orchestrator on-prem deployments enabling remote compromise.
Critical Linux KSMBD Vulnerabilities Exposed, Awaiting Kernel Patches
PremiumTwo KSMBD kernel SMB server RCEs (CVSS 9.0) disclosed publicly with no upstream fix yet, exposing Linux SMB services.
eMudhra to Exit Global SSL/TLS Operations Following Security Breach
PremiumeMudhra will withdraw from global CA business after researcher recovered easily guessable private keys for intermediate certificates.
Ransomware Breach Exposes Children's Data Due to Weak Passwords
PremiumICO criticizes Welsh local government and IT provider after children's data was stolen following a ransomware attack involving insecure 'Password1' credentials.
EU Scrutinizes Booking.com for Security Lapses Amid Phishing Concerns
PremiumEU Commission will investigate whether Booking.com adequately protects customers from phishing and scam risks on its platform.
Russian Cyberattack Targets Ukrainian Grain Firm in Coordinated Strike
PremiumSandworm and another group executed a destructive attack wiping data at a Ukrainian grain logistics company, disrupting operations.
Node.js Updates Address Critical Brotli Decoder Vulnerability
PremiumNode.js patched a Brotli decompression bug across supported lines that could enable remote code execution on affected servers.
Meta Faces $25 Billion Fine for Privacy Deception in Landmark New Mexico Case
PremiumA New Mexico court ordered Meta to pay $25 billion for privacy deceptions tied to Cambridge Analytica-era practices affecting millions.
LiteLLM Pipeline Breach Exposes Users to Malware Threats
PremiumLiteLLM's release pipeline was compromised to distribute credential-stealing and backdoor packages via PyPI and Docker Hub.
GitLab's Critical Flaw Prompts Urgent Patch for Self-Managed Servers
PremiumGitLab patched a maximum-severity unauthenticated RCE affecting self-managed servers back to version 7.0 (2014).
Chinese Cyberattack Exploits AI to Breach ConnectWise and Microsoft 365 Tenants
PremiumMicrosoft links Storm-0940 using ARTEX AI to speed a ConnectWise supply-chain compromise affecting thousands of tenants.
PHP Urgently Patches Critical Security Vulnerabilities
PremiumEmergency PHP2Shell patches released for CVE-2026-109618 and CVE-2026-109619 after pre-disclosure exploitation attempts.
Wednesday, October 21
PHP Urges Immediate Action on Critical Security Flaws
PHP warns of two critical vulnerabilities with patches scheduled tomorrow after leak of details ahead of disclosure.
Zeabur Ceases Operations Following Second Major Security Breach
Zeabur discloses credential leak led to compromise stealing over 3.2M environment variables, prompting shutdown after repeat breach.
Autonomous AI Agents Exploit Over 1,200 Websites, Breach 100 Companies
Operators used autonomous AI agents to attack over 1,200 websites, breaching more than 100 companies with minimal human control.
AOMEI Backupper Software Falls Victim to Short-Lived Supply Chain Attacks
AOMEI Backupper updates briefly served a downloader for ShinyRoad backdoor during multiple short compromise windows.
GhostAction Campaign Compromises Hundreds of GitHub Repositories
GhostAction campaign infected 790 GitHub repos with malicious workflows aimed at stealing cloud credentials and AI API keys.
WP2Shell Exploit Threatens WordPress Sites with Unauthorized Access
WP2Shell chains two WordPress Core flaws to create admin accounts and install plugin web shells without authentication.
Get these articles delivered to your inbox.
Subscribe free