UNM Health System Diverts Ambulances After Cybersecurity Incident
October 27, 2026
UNM Health System diverted ambulances and canceled clinic visits on Monday after a cybersecurity incident, leaving New Mexico without a
News
UNM Health System Diverts Ambulances After Cybersecurity Incident
UNM Health System diverted ambulances and canceled clinic visits on Monday after a cybersecurity incident, leaving New Mexico without a trauma center option.
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
Erica Windisch's Tailworm report details 11 unpatched Tailscale and Headscale flaws, including a root path over Tailscale SSH. Tailscale says a fix is close.
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the flaw to its KEV catalog.
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
HashiCorp fixed CVE-2026-110720, a CVSS 9.9 authorization flaw in consul-k8s that lets low-privileged users gain elevated Consul privileges across namespaces.
Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities
Rapid7 reportedly disclosed 17 Zimbra Collaboration Suite flaws, from cross-site scripting to sudo-based root escalation, with patch releases now available.
Sansec: 953 Online Stores Infected in Magento Loader Campaign
Sansec says an unknown actor infected 953 online stores, mostly Magento, since July 2025 using five loader domains and a database-resident cms_block loader.
Seoul Police Identify 7 Suspects in ARTEX AI-Assisted Hacking Spree
Seoul police identified seven suspects who used the ARTEX AI framework to breach 90+ South Korean organizations and steal 8.2 million records, media report.
WhiteArmor Gang Claims 19GB Hisense Data Theft, Demands $5 Million
A new extortion group, WhiteArmor, claims it stole 19GB of Hisense data and demands $5 million in Bitcoin. Hisense has not confirmed the unverified claim.
OpenMage Fixes 34 Magento LTS Flaws, Including Critical OAuth CSRF
OpenMage Magento LTS 20.19.0 and 20.18.2 fix 34 vulnerabilities, including a CVSS 9.0 OAuth CSRF flaw that could yield a persistent admin or customer API ...
Mautic 7.2.2 Patches CVSS 9.9 File-Upload RCE CVE-2026-115188
Mautic 7.2.2, 6.0.10 and 5.2.12 fix CVE-2026-115188, a CVSS 9.9 file-upload remote code execution flaw, along with SQL injection and API access control bugs.
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
October 27, 2026
Erica Windisch’s Tailworm report details 11 unpatched Tailscale and Headscale flaws, including a root path over Tailscale SSH. Tailscale says
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
October 27, 2026
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
October 27, 2026
HashiCorp fixed CVE-2026-110720, a CVSS 9.9 authorization flaw in consul-k8s that lets low-privileged users gain elevated Consul privileges across namespaces.
Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities
October 27, 2026
Rapid7 reportedly disclosed 17 Zimbra Collaboration Suite flaws, from cross-site scripting to sudo-based root escalation, with patch releases now available.
Sansec: 953 Online Stores Infected in Magento Loader Campaign
October 27, 2026
Sansec says an unknown actor infected 953 online stores, mostly Magento, since July 2025 using five loader domains and a
Seoul Police Identify 7 Suspects in ARTEX AI-Assisted Hacking Spree
October 27, 2026
Seoul police identified seven suspects who used the ARTEX AI framework to breach 90+ South Korean organizations and steal 8.2
WhiteArmor Gang Claims 19GB Hisense Data Theft, Demands $5 Million
October 27, 2026
A new extortion group, WhiteArmor, claims it stole 19GB of Hisense data and demands $5 million in Bitcoin. Hisense has
OpenMage Fixes 34 Magento LTS Flaws, Including Critical OAuth CSRF
October 27, 2026
OpenMage Magento LTS 20.19.0 and 20.18.2 fix 34 vulnerabilities, including a CVSS 9.0 OAuth CSRF flaw that could yield a
Mautic 7.2.2 Patches CVSS 9.9 File-Upload RCE CVE-2026-115188
October 27, 2026
Mautic 7.2.2, 6.0.10 and 5.2.12 fix CVE-2026-115188, a CVSS 9.9 file-upload remote code execution flaw, along with SQL injection and
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.