October 21, 2026

Vulnerability

BIND 9 vulnerabilities fixed by ISC including GSS-TSIG memory corruption and denial of service flaws

ISC Patches Four High-Severity BIND 9 Flaws, Including GSS-TSIG Memory Corruption

Do Son October 21, 2026 0
Node.js security release fixes Brotli remote code execution and TLS hostname bypass flaws

Node.js Fixes 10 Flaws, Including Brotli RCE and TLS Hostname Bypasses

Do Son October 21, 2026 0
PHP RCE vulnerabilities CVE-2026-109618 and CVE-2026-109619 allow unauthenticated remote code execution

PHP Releases Fixes and Full Details for Two Critical Unauthenticated RCE Flaws

Do Son October 21, 2026 0
Atlassian security bulletin October 2026 fixes third-party vulnerabilities in Jira and Confluence

Atlassian Patches 176 Flaws in Jira, Confluence and Other Data Center Products

Do Son October 21, 2026 0

Cyber Security

Lazarus Operation FlashHole Abuses CrossWeb EX and GitHub to Spy on South Korean Firms Operation FlashHole attack chain used by the Lazarus Group against South Korean firms via CrossWeb EX

Lazarus Operation FlashHole Abuses CrossWeb EX and GitHub to Spy on South Korean Firms

October 21, 2026 0
Attackers Abuse ConnectWise Cloud Backup Credential to Breach Over 300 Microsoft 365 Tenants Microsoft Entra sign-in logs showing ConnectWise Cloud Backup and ConnectWise Cloud Backup breach activity

Attackers Abuse ConnectWise Cloud Backup Credential to Breach Over 300 Microsoft 365 Tenants

October 21, 2026 0
Ahold Delhaize Cyberattack Knocks Brand Websites and Apps Offline in US and Europe Ahold Delhaize cyberattack - Albert Heijn outage as grocery brand websites and apps go offline

Ahold Delhaize Cyberattack Knocks Brand Websites and Apps Offline in US and Europe

October 20, 2026 0
UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering Diagram of the AOMEI supply chain attack and AOMEI supply chain attack UNC7017 update workflow #AOMEISupplyChainAttack #UNC7017

UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering

October 19, 2026 0

Malware Alert

LiteLLM 1.107.0 Compromised to Steal Cloud, AI Tool and Developer Credentials LiteLLM supply chain attack delivering a PyPI credential stealer through Python startup hooks

LiteLLM 1.107.0 Compromised to Steal Cloud, AI Tool and Developer Credentials

October 21, 2026 0
333 Tor Exit Nodes Hijacked by Ebury Malware for SSH Attacks Tor exit nodes infected with Ebury malware redirecting SSH connections to interception servers

333 Tor Exit Nodes Hijacked by Ebury Malware for SSH Attacks

October 21, 2026 0
Aoki Infostealer Harvests API Keys and Tokens From AI Coding Assistants Aoki infostealer and Aokigahara Aoki infostealer AI credential theft diagram

Aoki Infostealer Harvests API Keys and Tokens From AI Coding Assistants

October 21, 2026 0
CL-UNK-1211 Deploys SysGoRAT Malware and AI Scripts Against Government Linux Servers SysGoRAT malware and CL-UNK-1211 SysGoRAT malware Linux attack chain diagram

CL-UNK-1211 Deploys SysGoRAT Malware and AI Scripts Against Government Linux Servers

October 21, 2026 0

Data Leak

Sourcenext Data Breach Exposes 22.5M User Records Sourcenext data breach notice revealing API exploitation and account password exposure

Sourcenext Data Breach Exposes 22.5M User Records

October 20, 2026 0
OpenCode Security Breach Exposes 1.4% of Console Users OpenCode security breach exposing stored third-party API keys in OpenCode Console, linked to an AI distillation attack

OpenCode Security Breach Exposes 1.4% of Console Users

October 20, 2026 0
UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites UpdraftPlus data breach - stolen keys used in UpdraftCentral backdoor attacks on WordPress sites

UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites

October 20, 2026 0
Ricardo Data Leak Exposes User Contact Details Ricardo data leak illustration highlighting the SMG security vulnerability.

Ricardo Data Leak Exposes User Contact Details

October 9, 2026 0
Next Page ❯