Hacker Claims NBCUniversal Production and Tax-Credit Data Theft
October 21, 2026
An unverified claim on a hacker marketplace says NBCUniversal production plans, budgets and tax-credit applications were stolen; the company has
News
Hacker Claims NBCUniversal Production and Tax-Credit Data Theft
An unverified claim on a hacker marketplace says NBCUniversal production plans, budgets and tax-credit applications were stolen; the company has not confirmed.
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
An attacker used a hijacked contributor GitHub account to swap secret-stealing builds into five OVHcloud CLI releases for about 94 minutes before detection.
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024, many in critical infrastructure.
Public Exploit Released for Critical FortiSIEM Flaw CVE-2026-106173
Horizon3.ai published a proof-of-concept for CVE-2026-106173, a CVSS 9.4 unauthenticated path traversal flaw in Fortinet FortiSIEM that leads to code execution.
State Bank of India Confirms Data Leak of 3,897 Customer Records
State Bank of India told stock exchanges it lost certain data after 3,897 customer records appeared on the dark web in a set of about ...
Conduent Agrees to $80M Settlement Over Breach of 62M People
Conduent will pay $80 million to settle a class action over a 2024 cyber incident that exposed personal and health data of about 62 million ...
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
Calif published a working OpenBSD 7.9 root exploit chaining a 37-year-old integer overflow with a kernel flaw; syspatch errata 018 and 026 fix both bugs.
OpenCode Silently Patched Critical RCE Flaw With No CVE
Pillar Security says OpenCode fixed a critical MCP OAuth remote code execution flaw in version 1.18.33 without a CVE or advisory, hiding it from scanners.
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
Unit 42 says Qilin and INC ransomware groups exploit PAN-OS flaw CVE-2026-0257 to bypass MFA, then pivot from VPN gateways to VMware vCenter and ESXi ...
TeamUpdraft Breach Lets Attackers Backdoor WordPress Sites
Attackers who breached TeamUpdraft used stolen UpdraftCentral keys to plant backdoor plugins on WordPress sites, Patchstack found; fixed releases are out.
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
October 21, 2026
An attacker used a hijacked contributor GitHub account to swap secret-stealing builds into five OVHcloud CLI releases for about 94
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
October 21, 2026
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024,
Public Exploit Released for Critical FortiSIEM Flaw CVE-2026-106173
October 21, 2026
Horizon3.ai published a proof-of-concept for CVE-2026-106173, a CVSS 9.4 unauthenticated path traversal flaw in Fortinet FortiSIEM that leads to code
State Bank of India Confirms Data Leak of 3,897 Customer Records
October 21, 2026
State Bank of India told stock exchanges it lost certain data after 3,897 customer records appeared on the dark web
Conduent Agrees to $80M Settlement Over Breach of 62M People
October 21, 2026
Conduent will pay $80 million to settle a class action over a 2024 cyber incident that exposed personal and health
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
October 21, 2026
Calif published a working OpenBSD 7.9 root exploit chaining a 37-year-old integer overflow with a kernel flaw; syspatch errata 018
OpenCode Silently Patched Critical RCE Flaw With No CVE
October 21, 2026
Pillar Security says OpenCode fixed a critical MCP OAuth remote code execution flaw in version 1.18.33 without a CVE or
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
October 21, 2026
Unit 42 says Qilin and INC ransomware groups exploit PAN-OS flaw CVE-2026-0257 to bypass MFA, then pivot from VPN gateways
TeamUpdraft Breach Lets Attackers Backdoor WordPress Sites
October 20, 2026
Attackers who breached TeamUpdraft used stolen UpdraftCentral keys to plant backdoor plugins on WordPress sites, Patchstack found; fixed releases are
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.