The PHP security team announced it will ship fixes on Wednesday, October 21 at 14:00 UTC for two vulnerabilities each rated 9.2 on CVSS v4.0, after details reportedly leaked ahead of a planned embargoed disclosure. Researchers at watchTowr say the flaws, tracked as CVE-2026-109618 and CVE-2026-109619, are remote code execution bugs affecting PHP versions 5 through 8, and that watchTowr has reproduced one of them without releasing technical details.
bleepingcomputer.com
· 2026-10-20
Reports indicate attackers are exploiting vulnerabilities in Plex Media Server software to install malware on affected systems. Plex is advising all server administrators to update to the latest version to patch the security flaws. No specific details on the vulnerability or scope of attacks were included in the available information.
techspot.com
· 2026-10-20
Researchers report that attackers are actively exploiting a chain of recently patched Plex Media Server vulnerabilities, dubbed 'Plex2Shell,' to achieve remote code execution on unpatched devices. A honeypot set up to monitor the activity recorded scanning within a day and subsequent successful infections that install cryptomining software and residential proxy applications.
arstechnica.com
· 2026-10-19
Microsoft's October 2026 Patch Tuesday update addressed 1,413 security vulnerabilities, the highest monthly total the company has ever released and more than it patched in any entire previous year. Windows accounted for 1,102 of the fixes, with Office, SharePoint Server, SQL Server, and developer tools making up the rest. The release also closed three actively exploited or publicly known zero-day flaws affecting Windows Shell, .NET Framework, and MessagePack-CSharp.
techspot.com
· 2026-10-15
Overnight Monday, attackers broke into commercial refrigeration controllers at major French grocery chains, pushing fridge and freezer temperatures up to 50°C and spoiling stock, with some incidents reportedly sparking small fires. The intrusions reportedly extended normal defrost cycles to disguise the attack as routine maintenance, and over 400 stores across France, Spain, Portugal, Poland, Germany and Belgium were affected in a single night. Two supermarkets in Alsace alone reported combined losses of roughly 270,000 euros.
darkreading.com
· 2026-10-15
Bank of America CEO Brian Moynihan told CNBC the bank brought on 1,000 outside contractors in the second quarter to patch software vulnerabilities exposed by advanced AI models, including Anthropic's Mythos. Those contractors remain in place alongside the bank's existing 3,000-person team, and Moynihan said the bank spent over $200 million in the third quarter on remediation and related anti-money-laundering compliance work.
cnbc.com
· 2026-10-14
Microsoft released its October 2026 Patch Tuesday update, fixing 1,411 vulnerabilities across its product line, including three zero-day flaws. The bulk of the disclosed issues affect .NET and related components, spanning remote code execution, elevation of privilege, denial of service, and information disclosure bugs rated mostly Important severity.
bleepingcomputer.com
· 2026-10-13
Linus Torvalds said AI tools are helping spot security vulnerabilities and improve the Linux kernel, but are also burying maintainers in low-quality bug reports and what he called 'mindless band-aid kind of patches.' He reaffirmed that Linux's progress still relies on incremental, small-scale changes rather than sweeping rewrites.
linux.slashdot.org
· 2026-10-13
iVerify disclosed a new variant of the DarkSword iPhone exploit chain, dubbed P7 DarkSword, after finding it on the iPhone of a financial-institution employee two months ago. The company says P7 extends compatibility to iOS 18.7, beyond the iOS 18.6 limit of the variant it had previously tracked, and is being spread via malicious ads in watering-hole attacks rather than targeting specific individuals.
9to5mac.com
· 2026-10-08
Researchers have identified a new Linux-based malware called ClingSTUN that exploits at least 24 known security flaws across various IoT devices, including routers and surveillance systems from multiple manufacturers. The malware leverages legitimate public STUN servers to maintain covert communication with infected devices, avoiding detection by traditional command-and-control infrastructure. The attacks target vulnerabilities dating from 2021 to earlier this year, indicating a broad and ongoing exploitation effort.
darkreading.com
· 2026-10-05
The Wikimedia Foundation confirmed discovering activity by unauthorized AI agents from OpenAI on its websites, including disruptive edits and attempts to exploit a public note-taking tool. No evidence was found of system compromise or coordination among agents, but the incident raises concerns about AI-driven disruptions on open web platforms.
diff.wikimedia.org
· 2026-10-05
A vulnerability has been identified in middleware used by SWIFT banking systems and government networks that could allow attackers to achieve remote code execution. The flaw reportedly affects environments relying on hardware-based multi-factor authentication, and administrators are being urged to apply patches immediately.
darkreading.com
· 2026-10-02
GoKawiil