Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
October 23, 2026
Okta fixed four Access Gateway vulnerabilities in three advisories, including CVE-2026-115547, a CVSS 9.1 command execution flaw in the Admin
Identity and Access Management
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Okta fixed four Access Gateway vulnerabilities in three advisories, including CVE-2026-115547, a CVSS 9.1 command execution flaw in the Admin Console.
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
The UK ICO reprimanded Data Cymru and Ogi Networks after a test account with the password Password1 let ransomware hit data on 3,300 people, mostly ...
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers despite MFA.
Nikkei Discloses Microsoft 365 and Google Workspace Account Breaches
Nikkei says attackers breached two employee email accounts, exposed data on 1,646 people and sent about 9,000 phishing emails from a Microsoft 365 account.
TeamViewer Patches Critical Access-Control Bypass Flaw
TeamViewer patched a critical access-control bypass and four other flaws in its Full Client and Host software, urging all users to update immediately.
Teen Researcher’s AI Tool Gains Admin on Microsoft Titan
A 16-year-old researcher used a self-built AI tool to gain admin access to Microsoft's internal Titan analytics platform, exposing 17.3 trillion rows.
CSuite Phishing Campaign Hijacks Microsoft 365 Sessions
A phishing campaign dubbed CSuite is hijacking executives' Microsoft 365 sessions and installing ScreenConnect and Action1 for persistent remote access.
France Tax Agency Breached Seven Weeks via Stolen Passwords
An attacker used infostealer-harvested passwords to breach France's DGFIP tax portals for seven weeks, exposing millions of taxpayer and business records.
Suspected North Korean Hackers Steal $351.6M from Bitget Exchange
Bitget cryptocurrency exchange disclosed a $351.6 million theft from hot and warm wallets on September 25, with attribution pointing to North Korean hackers.
Roundcube Webmail SQL Injection Flaw Exploited Four Months After Patch
Canadian Centre for Cyber Security confirmed active exploitation of CVE-2026-48842, an unauthenticated SQL injection flaw in Roundcube Webmail patched in May.
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
October 21, 2026
The UK ICO reprimanded Data Cymru and Ogi Networks after a test account with the password Password1 let ransomware hit
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
October 12, 2026
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers
Nikkei Discloses Microsoft 365 and Google Workspace Account Breaches
October 6, 2026
Nikkei says attackers breached two employee email accounts, exposed data on 1,646 people and sent about 9,000 phishing emails from
TeamViewer Patches Critical Access-Control Bypass Flaw
October 1, 2026
TeamViewer patched a critical access-control bypass and four other flaws in its Full Client and Host software, urging all users
Teen Researcher’s AI Tool Gains Admin on Microsoft Titan
October 1, 2026
A 16-year-old researcher used a self-built AI tool to gain admin access to Microsoft’s internal Titan analytics platform, exposing 17.3
CSuite Phishing Campaign Hijacks Microsoft 365 Sessions
October 1, 2026
A phishing campaign dubbed CSuite is hijacking executives’ Microsoft 365 sessions and installing ScreenConnect and Action1 for persistent remote access.
France Tax Agency Breached Seven Weeks via Stolen Passwords
September 30, 2026
An attacker used infostealer-harvested passwords to breach France’s DGFIP tax portals for seven weeks, exposing millions of taxpayer and business
Suspected North Korean Hackers Steal $351.6M from Bitget Exchange
September 25, 2026
Bitget cryptocurrency exchange disclosed a $351.6 million theft from hot and warm wallets on September 25, with attribution pointing to
Roundcube Webmail SQL Injection Flaw Exploited Four Months After Patch
September 25, 2026
Canadian Centre for Cyber Security confirmed active exploitation of CVE-2026-48842, an unauthenticated SQL injection flaw in Roundcube Webmail patched in
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.