Cybersecurity, without the noise.
Verified advisories, emerging threats, and original analysis, with sources you can inspect.
Top Stories
Latest reports from around the world
CERT-In warns of denial-of-service risk in Cisco ASA and FTD VPN software
CERT-In's November 2 vulnerability note warns that affected Cisco firewall software may be susceptible to denial of service when secondary authentication is configured on a VPN tunnel group.
2026-11-05 · CERT-In · Read full reportCyber Incidents · EuropeEU agencies coordinate response to cyber incidents affecting commercial refrigeration systems
European authorities say commercial refrigeration systems in several EU countries have been affected by cyber incidents since October 11, with another wave reported on November 1–2. Investigations remain ongoing.
2026-11-04 · ENISA / European Commission · Read full reportOctober 2026 Archive · IndiaFirefox and Thunderbird security updates cover multiple critical weaknesses
CERT-In lists critical Mozilla vulnerabilities affecting Firefox, Firefox ESR and Thunderbird releases.
2026-10-30 · CERT-In · Read full reportOctober 2026 Archive · IndiaApache Tomcat authentication bypass and cross-user response warning
CERT-In warns of multiple Tomcat vulnerabilities affecting supported 9, 10 and 11 branches.
2026-10-29 · CERT-In · Read full reportPhishing · North AmericaCanada warns of help-desk impersonation calls stealing cloud sign-in sessions
Canada's cyber centre reports an ongoing voice-phishing campaign against organisations, particularly legal and financial firms, using fake IT calls and lookalike sign-in pages to capture authentication sessions.
2026-10-28 · Canadian Centre for Cyber Security · Read full reportOctober 2026 Archive · IndiaZoom Workplace clients receive security vulnerability warning
CERT-In warns of privilege escalation and sensitive-information exposure affecting certain Zoom Workplace clients.
2026-10-28 · CERT-In · Read full reportOctober 2026 Archive · IndiaGoAhead embedded web server affected by TLS-related vulnerabilities
CERT-In identifies multiple vulnerabilities in GoAhead Web Server versions used by networked and embedded products.
2026-10-28 · CERT-In · Read full reportOctober 2026 Archive · GlobalChrome October 27 stable update addresses critical FileSystem flaws
Google's October 27 release lists 52 security fixes, including critical use-after-free vulnerabilities.
2026-10-27 · Google Chrome Stable · Read full reportOctober 2026 Archive · Indiacurl and libcurl HTTP/2 use-after-free vulnerability reported
CERT-In reports a use-after-free issue that may affect curl/libcurl HTTP/2 upload handling.
2026-10-26 · CERT-In · Read full reportOctober 2026 Archive · IndiaOracle Java and GraalVM certificate validation vulnerability
CERT-In advises Oracle Java SE and GraalVM users to check affected builds and apply security updates.
2026-10-24 · CERT-In · Read full reportOctober 2026 Archive · IndiaISC BIND DNS servers require security review
CERT-In warns about vulnerabilities in affected ISC BIND 9 releases which could disrupt DNS services.
2026-10-23 · CERT-In · Read full reportCybercrime · AfricaINTERPOL reports 1,462 arrests in Africa-wide cybercrime crackdown
Operation Serengeti III coordinated action across 21 countries, with INTERPOL reporting over $105 million in recovered funds, 10,909 disrupted malicious networks and nearly 66,000 identified victims.
2026-10-22 · INTERPOL · Read full reportSecurity Operations · South AmericaBrazilian university restricts public access to systems amid critical PHP vulnerability response
Brazil's UFCG temporarily limited internet access to systems including SEI, GLPI, Moodle and OJS while patching critical PHP vulnerabilities, illustrating the operational impact of emergency security measures.
2026-10-21 · Federal University of Campina Grande (Brazil) · Read full reportThreat Research · Asia-PacificJapan's JPCERT links AI-assisted API probing to unauthorised access investigations
Japan's JPCERT/CC analysed attack infrastructure used in incidents affecting local organisations and found evidence of AI-assisted vulnerability scanning and tests against mobile-application APIs, including services outside Japan.
2026-10-21 · JPCERT/CC · Read full reportCritical Vulnerabilities · EuropeEuropean cyber agencies urge urgent PHP patches for two critical server vulnerabilities
ENISA, CERT-EU, Europol and European partners warned of two PHP weaknesses, CVE-2026-109618 and CVE-2026-109619, which could enable unauthenticated remote code execution in affected environments.
2026-10-21 · ENISA / European Commission · Read full reportRansomware · North AmericaUS and international agencies warn SafePay ransomware has hit hundreds of organisations
A joint CISA and FBI advisory says SafePay ransomware has affected at least 600 organisations across the Americas, Europe and Australia since August 2024. Investigators describe stolen credentials, vulnerable edge systems and attacks on backups.
2026-10-20 · CISA / FBI joint advisory · Read full reportOctober 2026 Archive · IndiaSonicWall SMA 1000 appliances face multiple critical vulnerabilities
CERT-In advises administrators to patch SMA 1000 appliances after multiple high-impact flaws were disclosed.
2026-10-19 · CERT-In · Read full reportOctober 2026 Archive · IndiaPalo Alto Networks PAN-OS and GlobalProtect security updates urged
CERT-In listed multiple weaknesses affecting PAN-OS, Prisma Access and related Palo Alto Networks products.
2026-10-16 · CERT-In · Read full reportOctober 2026 Archive · GlobalChrome October 15 update addresses critical prerender flaw
Google's October 15 Chrome desktop release addressed ten security vulnerabilities.
2026-10-15 · Google Chrome Stable · Read full reportOperational Technology · OceaniaAustralia urges businesses to secure refrigeration and other connected operational technology
Australia's ACSC warned operators of internet-connected cooling and industrial systems to reduce external exposure following reported overseas incidents, while noting it had not seen active targeting in Australia.
2026-10-14 · Australian Signals Directorate / ACSC · Read full reportOctober 2026 Archive · IndiaIvanti security advisory raises concerns for Connect Secure deployments
CERT-In warns that affected Ivanti products may permit unauthorized access and command execution.
2026-10-14 · CERT-In · Read full reportOctober 2026 Archive · IndiaCERT-In flags security flaws across Microsoft cloud products
CERT-In warned of critical vulnerabilities in multiple Microsoft online and cloud services.
2026-10-14 · CERT-In · Read full reportCyber Policy · Asia-PacificSingapore expands national cyber command centre for earlier threat detection and response
Singapore announced enhancements to its National Cybersecurity Command Centre, aiming to strengthen critical-infrastructure monitoring, malicious-domain protection, and coordinated response.
2026-10-13 · Cyber Security Agency of Singapore · Read full reportOctober 2026 Archive
Browse source-dated cybersecurity advisories and security developments from across October 2026. These are historical reports, not breaking news.
Explore October newsFrom the community
Have evidence of an important cybersecurity story? Share a tip and supporting source links. Our editorial team reviews it before anything goes public.
Submit a news tipCyberGeek Briefings
Weekly highlights and monthly threat roundups, curated only from approved stories.
Browse editions