-
Swallowtail, the Russian espionage group also tracked as APT28, Fancy Bear and Forest Blizzard, targeted organizations in two NATO member states, including a law enforcement agency, a naval shipbuilder and a manufacturer of military aircraft engines. T…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM. This vulnerability allows unauthenticated attackers to turn arbitrary file writes into remote code execution. Researcher Zac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Oracle has released its October 2026 Critical Patch Update, which includes 1,295 new security patches across its enterprise portfolio. Published on October 20, the advisory addresses vulnerabilities in Oracle software as well as third-party components….
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Apache disclosed eight vulnerabilities in Tomcat, including authentication bypass, cross-user data exposure, insecure socket access, and cryptographic configuration failures. Of these, three are rated Important, and five are rated Low. Fixes are availa…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers compromised 333 Tor exit nodes in a coordinated campaign to intercept SSH connections, steal passwords, and deploy the Ebury Linux backdoor, according to a research account published on October 20, 2026. The compromised infrastructure account…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Scattered Spider, LAPSUS$, and ShinyHunters represent distinct intrusion clusters within The Com, not interchangeable names for one cybercriminal organization. The analysis separates these clusters from SP1D3R HUNTERS, also called Scattered LAPSUS$ Hun…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
CISA has warned that SafePay ransomware actors have compromised at least 600 organizations across multiple critical infrastructure sectors, combining data theft and encryption with deliberate attacks on backup systems to obstruct recovery. The October …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Rust 1.100, scheduled for November 12, 2026, will introduce stable support for Cargo dependency cooldowns, allowing developers to reject newly published package versions until they reach a configurable minimum age. The feature gives security researcher…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ransomware affiliates associated with INC and The Gentlemen exposed an intrusion ecosystem after leaving operational servers publicly accessible. The investigation began in late September 2026 with open directories on 45.227.254[.]43. Configuration fil…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has introduced new rules for assessing reports in its bug bounty programs, tying submission completeness more directly to potential rewards. Announced by the Microsoft Security Response Center (MSRC) on October 20, 2026, these changes replace…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
