← Back to Blog
Security News
Security News — 19 October 2026
A daily, automatically-compiled digest of the cyber security stories that broke in the last 24 hours, drawn from 9 trusted feeds. Each entry is a short excerpt — follow the link to read the full article at its original publisher. Compiled 19 October 2026 · 21 items.
Urgent Vulnerabilities 5
Actively exploited, critical, or high-severity flaws — patch or mitigate first.
Palo Alto Unit 4219 Oct
KEV · exploitedRansomware
- Exploited
- Yes — CISA KEV
- Product
- Palo Alto Networks PAN-OS
- Impact
- Authentication bypass
- Audience
- Network/firewall admins
- Action
- Patch per vendor / CISA KEV
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19) appeared…
Read at source →
CVEDatabase - Critical CVEs19 Oct
CriticalCVSS 9.3
CVSS 9.3 CRITICAL Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/{lang} endpoint, and 1.0.16 before 1.0.4…
Read at source →
CVEDatabase - Critical CVEs19 Oct
CriticalCVSS 9.2
- Impact
- Remote code execution
- Action
- Patch when a fix is available; monitor exposure
CVSS 9.2 CRITICAL Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can crea…
Read at source →
CVEDatabase - Critical CVEs19 Oct
HighCVSS 8.6
CVSS 8.6 HIGH A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The…
Read at source →
CVEDatabase - Critical CVEs19 Oct
HighCVSS 8.6
- Product
- H3C Magic NX15
- Impact
- Command injection
- Action
- Patch when a fix is available; monitor exposure
CVSS 8.6 HIGH A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is pos…
Read at source →
Threat Activity 9
Malware, campaigns and adversary tradecraft.
The Hacker News19 Oct
Exploited
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done.…
Read at source →
The Hacker News19 Oct
PoC
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the onl…
Read at source →
Dark Reading19 Oct
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
Read at source →
Dark Reading19 Oct
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
Read at source →
The Hacker News19 Oct
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math sa…
Read at source →
Microsoft Security Blog19 Oct
New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection continuously. The post Agents are your newest insiders. Security must move at their speed. appeared first on Microsoft S…
Read at source →
FreshRSS releases19 Oct
Milestone This is a second security and bug-fixing release in the continuation of 1.30.x . Note that our rolling-release channel ( edge ) is recommended for faster security patches. Bug fixes highlights 🐛: Fix PHP 8.5+ deprecation warning…
Read at source →
Dark Reading19 Oct
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
Read at source →
BleepingComputer19 Oct
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. [...]
Read at source →
Breaches & Incidents 6
Ransomware, data breaches and supply-chain events.
BleepingComputer19 Oct
Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week. [...]
Read at source →
BleepingComputer19 Oct
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]
Read at source →
BleepingComputer19 Oct
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attack…
Read at source →
Dark Reading19 Oct
Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard's Greg Pollock explains what universities…
Read at source →
Krebs on Security19 Oct
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations wit…
Read at source →
The Hacker News19 Oct
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake fo…
Read at source →
Policy & Commentary 1
Industry, executive and AI-security perspective.
Schneier on Security19 Oct
Interesting research : Abstract : Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an agent, the hundredth instance of a fa…
Read at source →