The day's cybersecurity headlines from public sources, in one place. Search them, filter by theme or CVE, or show only vulnerabilities CISA has confirmed are being exploited. Every headline links to the original.
For my own read on what the news means for your business, see Insights.
-
CISA adds CVE-2026-109619 to KEV: PHP Stale Internal Request-State Vulnerability
Federal patch deadline 2026-10-29. PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.
-
CISA adds CVE-2026-109618 to KEV: PHP Memory Corruption Vulnerability
Federal patch deadline 2026-10-29. PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.
Also covered by BleepingComputer
-
Trust Is Not What It Seems — and Fraudsters Are Counting on It
Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence.
-
Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
Fixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself.
-
AI Tools Are Generating Massive Attacks for Little Cost
One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change.
-
Why Caribbean Threats Cascade Into Global Cyber-Risk
The region is demonstrating what happens when exploits accelerate but assurance does not.
-
Cyber Insurance's New Reality: Underwriting Isn't Enough
Rising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself.
-
Quest Diagnostics: patient data likely accessed in hack (SEC filing)
Quest notified the SEC that patient data was likely accessed. A 60-day HIPAA notification clock follows. Same-day HIPAA Journal items: Tarter Krinsky & Drogin law firm breach exposing PHI of 196,645 people (a BAA and supply-chain example), UltraMobile Imaging breach (~75,000), Washington…
-
CISA adds CVE-2026-110447 to KEV: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Federal patch deadline 2026-10-26. Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.
-
CISA adds CVE-2026-114625 to KEV: Arista VeloCloud Orchestrator SQL Injection Vulnerability
Federal patch deadline 2026-10-26. Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and…
Also covered by The Hacker News
-
AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack
Microsoft's Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with other agents may compound — not contain — the risk.
-
State Bank of India Suffers a Customer PII Data Leak
Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
-
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.
-
What We Missed: Feds Lasso Texas Laptop Farms
In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in "Operation Lonestar Justice" to Staples' gift card bonanza.
-
Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation.
-
As AI Risks Grow, Insurers Split on Covering the Damage
Some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.
-
Microsoft: China-aligned Storm-0940 used ARTEX AI agents to hit ConnectWise Cloud Backup and 2,250+ tenants
Microsoft says Storm-0940 used ARTEX, a Go-based agentic pentest framework, to automate scanning, password spraying and OAuth app abuse at "machine speed" against hundreds of organizations since September. On Oct 15 the attackers took over identities for several ConnectWise cloud apps and tried to…
-
ICSA-26-274-06: Meari IoT Cloud Platform OpenAPI Service (Update A)
Highest CVSS 7.7. Affects IoT Cloud Platform OpenAPI Service. Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data…
-
ICSA-26-295-01: Kiloview E3 NDI Encoder
Highest CVSS 9.9. Affects E3 Firmware. Successful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device.
-
ICSA-26-295-02: Siemens Industrial Edge App Publisher
Highest CVSS 8.3. Affects Industrial Edge App Publisher. The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to…
-
ICSA-26-295-05: Siemens SENTRON 3NA COM Fuse
Highest CVSS 5.8. Affects SENTRON 3NA COM Fuse. SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be…
-
ICSA-26-295-06: Siemens PSS(R)SINCAL
Highest CVSS 7.0. Affects PSS(R)SINCAL V21.5, PSS(R)SINCAL V22.0, PSS(R)SINCAL V22.5. PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition…
-
ICSA-26-295-07: Siemens SIMATIC IPCs
Highest CVSS 7.7. Affects SIMATIC IPC BX-21A, SIMATIC IPC RW-543A, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G. The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI…
-
ICSA-26-295-08: Siemens APOGEE, TALON and Desigo PXC/PXM Products
Highest CVSS 8.2. Affects APOGEE MBC (PPC) (BACnet), APOGEE MBC (PPC) (P2 Ethernet), APOGEE MEC (PPC) (BACnet) and 20 more. The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected…
-
ICSA-26-295-10: Siemens SIMATIC S7 Webserver API
Highest CVSS 7.5. Affects .NET Client Library for SIMATIC S7 Webserver API. .NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has…