CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
October 21, 2026
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024,
Security Spotlight
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024, many in critical infrastructure.
Conduent Agrees to $80M Settlement Over Breach of 62M People
Conduent will pay $80 million to settle a class action over a 2024 cyber incident that exposed personal and health data of about 62 million ...
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Siemens confirmed attackers exploited CVE-2026-110936 in Software Center, bundling a signed copy with malicious DLLs in the ROMULUS ClickFix campaign.
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
Microsoft confirmed October Windows Server updates cause OWA sign-in failures and stuck mail on on-premises Exchange servers; a fix is still pending.
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
AWS patched CVE-2026-110812, a CVSS 9.9 unsafe deserialization flaw in Apache TinkerPop Gremlin that affects Amazon Neptune engine versions 1.2.0.0 and later.
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such zero-day since September.
Meta Notifies 1,500 After Stolen Credentials Expose GitHub Code
Meta is notifying about 1,500 people after hackers used an employee's stolen credentials to take product code and a small amount of personal data from ...
Docker Fixes Critical Docker Hub Flaw GhostPat, CVE-2026-105445
Docker patched GhostPat, a critical Docker Hub flaw (CVE-2026-105445, CVSS 9.4) that let attackers act as other accounts at the registry level for two years.
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry secrets.
Atlassian CVE-2026-21589 Exploited Within Two Hours of PoC Details
Attackers probed Atlassian Data Center flaw CVE-2026-21589 within two hours of watchTowr publishing details; Previdian logged 15 attempts from three IPs.
Conduent Agrees to $80M Settlement Over Breach of 62M People
October 21, 2026
Conduent will pay $80 million to settle a class action over a 2024 cyber incident that exposed personal and health
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
October 20, 2026
Siemens confirmed attackers exploited CVE-2026-110936 in Software Center, bundling a signed copy with malicious DLLs in the ROMULUS ClickFix campaign.
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
October 19, 2026
Microsoft confirmed October Windows Server updates cause OWA sign-in failures and stuck mail on on-premises Exchange servers; a fix is
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
October 16, 2026
AWS patched CVE-2026-110812, a CVSS 9.9 unsafe deserialization flaw in Apache TinkerPop Gremlin that affects Amazon Neptune engine versions 1.2.0.0
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
October 15, 2026
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such
Meta Notifies 1,500 After Stolen Credentials Expose GitHub Code
October 14, 2026
Meta is notifying about 1,500 people after hackers used an employee’s stolen credentials to take product code and a small
Docker Fixes Critical Docker Hub Flaw GhostPat, CVE-2026-105445
October 14, 2026
Docker patched GhostPat, a critical Docker Hub flaw (CVE-2026-105445, CVSS 9.4) that let attackers act as other accounts at the
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
October 12, 2026
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry
Atlassian CVE-2026-21589 Exploited Within Two Hours of PoC Details
October 8, 2026
Attackers probed Atlassian Data Center flaw CVE-2026-21589 within two hours of watchTowr publishing details; Previdian logged 15 attempts from three
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.