A breach at Japanese emergency-communications provider Arcadia exposed data to possible access and sent more than 1.4 million suspected phishing messages through a trusted channel.
GitLab patched CVE-2026-110264, a CVSS 10 vulnerability that can allow unauthenticated code execution on affected self-managed servers. Seven fixed releases are available.
Cisco fixed four grouped Snort 3 vulnerability classes affecting open-source software and Cisco products and services. The highest score is 9.0, with no workaround for vulnerable self-managed releases.
Cisco fixed eight grouped vulnerabilities across Unified CM, Unity Connection, Emergency Responder, and related products. The highest score is 9.8, and Cisco says there is no workaround.
Between October 1 and October 5, attackers took control of more than 300 Tor exit relays and used them to intercept SSH connections and capture login passwords. No CVE was assigned; this was a host-compromise campaign against relay machines. If you used SSH over Tor with a password in that window, change the password.
Reporting cutoff: 21 October 2026, 12:20 p.m. EDT · Source: Cisco Security Advisory cisco-sa-vcs-static-cred-hr7EWZ8t (published 21 October 2026, 16:00 GMT) Executive decision If you operate a Cisco Expressway Core or Expressway Edge appliance or virtual instance that is configured in…
The public LiteLLM 1.107.0 release was a supply-chain compromise. All seven PyPI wheels carried a credential stealer and a remote-code loader, and the floating Docker tags on ghcr.io and docker.io were affected; PyPI has removed 1.107.0 and the floating tags are confirmed removed. Here is what executed, what the vendor has confirmed and what it has not, and the practical response for any operator whose environment ran 1.107.0.
Bullhorn has voluntarily taken eight of its products offline while the emergency PHP patches for CVE-2026-109618 and CVE-2026-109619 are applied, while saying its October 17 cyber incident remains contained and a separate global database-replication delay is now also active. Here is what is and is not confirmed, which products are affected, and what to do today.
Raven can rank candidate rentals and properties from interior photos—but its public demos are not an accuracy benchmark. Here’s what is verified, what remains unknown, and how to reduce your exposure.
Apple released macOS Golden Gate 27.0.1, Tahoe 26.7.1, and Sequoia 15.8.1. Here is what changed, who should update, and why the CVE exploitation language needs careful scope.
