572/69 Tuesday, October 20, 2026 ConnectWise, a provider of IT management and cybersecurity solutions, announced the suspension of its Cloud Backup service, formerly known as SkyKick, along with the temporary shutdown of its SaaS Security and Cloud Management services. The action followed the discovery that attackers had gained unauthorized access to seven application identities and […]
571/69 Tuesday, October 20, 2026 The developer of a WordPress plugin has confirmed that some Rank Math PRO download files distributed through its official website were modified with malware in a supply chain attack. Users who downloaded version 3.0.123 between 20:02 UTC on October 15 and 07:12 UTC on October 16 may have received a […]
570/69 Monday, October 19, 2026 Researchers from Darktrace have disclosed a malware campaign involving CikaBika Bot, a Rust-based Remote Access Trojan (RAT) targeting Windows systems. The malware uses Discord as its Command-and-Control (C2) channel to receive commands and control infected machines, while Ngrok is used to exfiltrate data. The attack involves a disk image containing […]
569/69 Monday, October 19, 2026 Drupal, the developer of the open-source Content Management System (CMS), has released security updates to address two Critical Remote Code Execution (RCE) vulnerabilities that could allow attackers to execute commands on affected servers. The vulnerabilities involve the Field UI module, which is part of Drupal Core, and the Entity List […]
568/69 Monday, October 19, 2026 Cybersecurity researchers have disclosed a vulnerability hidden in software used by Broadcom Wi-Fi chipsets that has been deployed since 2010. The flaw could allow an attacker within wireless signal range to execute malicious commands and take control of a router without knowing the password or completing an authentication process. The […]
567/69 Thursday, October 15, 2026 Researchers from Wordfence disclosed CVE-2026-39919, a Critical vulnerability in Ghostscript with a CVSS v4.0 score of 9.3. Ghostscript is software widely used to process PostScript and PDF files. The vulnerability is a heap-based buffer overflow in the JPEG 2000 image-processing component and affects Ghostscript versions 9.21 through 10.07.1. It could […]
566/69 Thursday, October 15, 2026 The U.S. Department of Justice disclosed that Abdulrahman Alfozan, a 35-year-old Saudi national and OpenAI employee, was arrested on October 9, 2026, after allegedly installing a concealed audio recording device in an executive conference room at OpenAI’s San Francisco office to record conversations without authorization. Alfozan was charged with using […]
565/69 Thursday, October 15, 2026 Anthropic has published a report warning that small artificial intelligence (AI) models may soon develop the capability to autonomously spread across internet-connected devices, including IoT products such as smart ovens and low-cost Android-based TV boxes. Such activity could potentially form self-propagating worm botnets capable of operating and expanding without centralized […]
564/69 Wednesday, October 14, 2026 Reports have emerged of cyberattacks targeting refrigeration control systems at several supermarkets in France. Attackers gained control of Danfoss AK-SM and AK-SC devices and manipulated their defrost settings, causing temperatures in some refrigerators and freezers to rise to approximately 50°C. As a result, significant quantities of fresh and frozen products […]
563/69 Wednesday, October 14, 2026 Canonical, the parent company of Ubuntu, disclosed that its websites were continuously targeted by a Distributed Denial-of-Service (DDoS) attack on October 8, 2026, marking the second DDoS incident affecting the company’s infrastructure this year. Canonical stated through Ubuntu Discourse that its team was working to mitigate the incident and that […]
