Year: 2026

552/69 Wednesday, October 7, 2026 Security researchers have disclosed vulnerabilities affecting LibreOffice Calc and Apache OpenOffice Calc that could allow attackers to execute Java code on a user’s device through a specially crafted spreadsheet file. The vulnerabilities are tracked as CVE-2026-63277 for LibreOffice and CVE-2026-59265 for Apache OpenOffice. Successful exploitation requires the user to open […]

551/69 Wednesday, October 7, 2026 Italy’s data protection authority, the Garante per la Protezione dei Dati Personali (GPDP), has imposed a €7 million fine, approximately US$7.8 million, on IQVIA over improper data processing practices that may have exposed the health information of around one million patients to the risk of disclosure or re-identification. IQVIA provides […]

550/69 Wednesday, October 7, 2026 Microsoft has released an emergency security update to address a high-severity vulnerability affecting Microsoft Exchange Server. The vulnerability could allow a malicious actor to elevate access privileges and gain unauthorized access to sensitive information. This issue directly affects organizations that continue to operate on-premises email servers and is considered particularly […]

549/69 Tuesday, October 6, 2026 Researchers from FortiGuard Labs have disclosed the discovery of ClingSTUN malware on Linux systems, targeting internet-exposed devices by exploiting previously disclosed but unpatched vulnerabilities to gain access. Researchers found that the attackers exploited 24 vulnerabilities affecting products from multiple vendors, including D-Link, TP-Link, Ivanti, Realtek, Tenda, and AVTECH, before installing […]

548/69 Tuesday, October 6, 2026 A man suspected of being a member of the ShinyHunters group has reportedly been detained by Jordanian authorities and is cooperating with the FBI to help identify other members of the group. The individual has been identified as Saif al-Din Khader, who sources said was arrested last Tuesday. However, details […]

547/69 Tuesday, October 6, 2026 The threat group behind Warlock ransomware, also known as Longlegs or Storm-2603, has reportedly continued exploiting the Microsoft SharePoint ToolShell vulnerability chain, first disclosed in mid-2025, as an initial access vector. Over the past two months, the group has attacked at least four organizations, including a water utility, a telecommunications […]

546/69 Monday, October 5, 2026 Researchers from Jamf Threat Labs have disclosed the discovery of CloudSyncD malware on macOS, which disguises itself as a Zoom installer and uses instructions on the installation page to trick users into bypassing Gatekeeper protections before displaying a fake prompt requesting the password for the local account. Researchers first identified […]

545/69 Monday, October 5, 2026 GitLab has released patches for a Critical vulnerability in GitLab AI Gateway, tracked as CVE-2026-90970 with a CVSS score of 9.9. The vulnerability could allow an authenticated user with access to the Duo Agent Platform to execute commands on the AI Gateway. GitLab disclosed the vulnerability on October 2, 2026, […]

544/69 Monday, October 5, 2026 Citrix has released an emergency security update to address CVE-2026-88779, a zero-day memory buffer vulnerability affecting NetScaler ADC and NetScaler Gateway devices with SAML authentication enabled. The vulnerability is particularly important for organizations using these appliances because attacks have been observed targeting unpatched systems. The U.S. Cybersecurity and Infrastructure Security […]

543/69 Friday, October 2, 2026 Researchers from Sucuri have disclosed the discovery of malware on WordPress websites known as SC, which uses multiple persistence mechanisms to restore deleted backdoor components even after administrators remove detected files. Researchers identified at least eight malware components distributed across WordPress files, the database, and shared memory, with each component […]