October 2026

FortiMail Flaw Exploited in the Wild, Exposing Corporate Networks

Teen Allegedly Ran KillSec Ransomware Operation Behind 500 Attacks

Pentagon Breach Exposes Data on 2.8 Million Personnel

Apple Tightens macOS Privacy Rules After Muse AI Message Access

Zammad Flaws Let Attackers Reach Root in Seconds, CISA Warns

AWS Patches Critical Loom Flaw Allowing Full Admin Takeover

Italy Fines IQVIA €7 Million Over Identifiable Patient Health Data

ShinyHunters Hacker Detained in Jordan and Reportedly Aids FBI Investigation

Fake Zoom Installer Steals macOS Passwords to Deploy CloudSyncD

CISA Warns of Active Exploitation in Citrix NetScaler Flaw

South Korea Orders Probe Into AI Linked Bank Data Breaches

Vermont School District Hack Exposes Student and Staff Data

CISA Tightens Retention Bonus Rules as Staff Loss Risks Grow

MCP Flaws Let Attackers Cascade Malicious Prompts Between AI Agents

ClingSTUN turns vulnerable IoT devices into proxy nodes using STUN servers

Former Engineer Jailed for Locking Thousands of Company Devices

ClickFix Attacks Hide Malware Until Victims Paste and Run Commands

Hackers Hijack Country Domains to Forge Google TLS Certificates

Web3 Supply Chain Attacks Target Cloud Credentials in Developer Pipelines

Leaked SRG Chats Claim $207 Million in Ransom Payments from Law Firms

Australia Weighs Mandatory AI Incident Reporting After Medicare Breach

Microsoft launches PQC TLS pilot to test post-quantum certificates

AWS AgentCore flaw let one chatbot prompt expose an entire account

Let’s Encrypt will cut certificate lifetimes to 64 days in 2027

OpenAI Fires Three Safety Researchers After Breach of Trust Probe

ASOS Breach Let Attackers Send Fake Notifications to Customers

AI Security Boom Drives Cyber M&A to a Record 117 Deals in Q3

FBI arrests ransomware negotiator in ShinyHunters extortion probe