October 2026 News Archive
A curated retrospective of cybersecurity advisories released between October 1 and October 31, 2026, covering India and global technology vendors. Stories retain the original advisory date, even though the archive was prepared later. This is a growing selection, not a claim to cover every incident worldwide.
30 October stories
Firefox and Thunderbird security updates cover multiple critical weaknesses
CERT-In lists critical Mozilla vulnerabilities affecting Firefox, Firefox ESR and Thunderbird releases.
Primary source: CERT-In2026-10-29 · IndiaApache Tomcat authentication bypass and cross-user response warning
CERT-In warns of multiple Tomcat vulnerabilities affecting supported 9, 10 and 11 branches.
Primary source: CERT-In2026-10-28 · IndiaZoom Workplace clients receive security vulnerability warning
CERT-In warns of privilege escalation and sensitive-information exposure affecting certain Zoom Workplace clients.
Primary source: CERT-In2026-10-28 · IndiaGoAhead embedded web server affected by TLS-related vulnerabilities
CERT-In identifies multiple vulnerabilities in GoAhead Web Server versions used by networked and embedded products.
Primary source: CERT-In2026-10-28 · North AmericaCanada warns of help-desk impersonation calls stealing cloud sign-in sessions
Canada's cyber centre reports an ongoing voice-phishing campaign against organisations, particularly legal and financial firms, using fake IT calls and lookalike sign-in pages to capture authentication sessions.
Primary source: Canadian Centre for Cyber Security2026-10-27 · GlobalChrome October 27 stable update addresses critical FileSystem flaws
Google's October 27 release lists 52 security fixes, including critical use-after-free vulnerabilities.
Primary source: Google Chrome Stable2026-10-26 · Indiacurl and libcurl HTTP/2 use-after-free vulnerability reported
CERT-In reports a use-after-free issue that may affect curl/libcurl HTTP/2 upload handling.
Primary source: CERT-In2026-10-24 · IndiaOracle Java and GraalVM certificate validation vulnerability
CERT-In advises Oracle Java SE and GraalVM users to check affected builds and apply security updates.
Primary source: CERT-In2026-10-23 · IndiaISC BIND DNS servers require security review
CERT-In warns about vulnerabilities in affected ISC BIND 9 releases which could disrupt DNS services.
Primary source: CERT-In2026-10-22 · AfricaINTERPOL reports 1,462 arrests in Africa-wide cybercrime crackdown
Operation Serengeti III coordinated action across 21 countries, with INTERPOL reporting over $105 million in recovered funds, 10,909 disrupted malicious networks and nearly 66,000 identified victims.
Primary source: INTERPOL2026-10-21 · Asia-PacificJapan's JPCERT links AI-assisted API probing to unauthorised access investigations
Japan's JPCERT/CC analysed attack infrastructure used in incidents affecting local organisations and found evidence of AI-assisted vulnerability scanning and tests against mobile-application APIs, including services outside Japan.
Primary source: JPCERT/CC2026-10-21 · EuropeEuropean cyber agencies urge urgent PHP patches for two critical server vulnerabilities
ENISA, CERT-EU, Europol and European partners warned of two PHP weaknesses, CVE-2026-109618 and CVE-2026-109619, which could enable unauthenticated remote code execution in affected environments.
Primary source: ENISA / European Commission2026-10-21 · South AmericaBrazilian university restricts public access to systems amid critical PHP vulnerability response
Brazil's UFCG temporarily limited internet access to systems including SEI, GLPI, Moodle and OJS while patching critical PHP vulnerabilities, illustrating the operational impact of emergency security measures.
Primary source: Federal University of Campina Grande (Brazil)2026-10-20 · North AmericaUS and international agencies warn SafePay ransomware has hit hundreds of organisations
A joint CISA and FBI advisory says SafePay ransomware has affected at least 600 organisations across the Americas, Europe and Australia since August 2024. Investigators describe stolen credentials, vulnerable edge systems and attacks on backups.
Primary source: CISA / FBI joint advisory2026-10-19 · IndiaSonicWall SMA 1000 appliances face multiple critical vulnerabilities
CERT-In advises administrators to patch SMA 1000 appliances after multiple high-impact flaws were disclosed.
Primary source: CERT-In2026-10-16 · IndiaPalo Alto Networks PAN-OS and GlobalProtect security updates urged
CERT-In listed multiple weaknesses affecting PAN-OS, Prisma Access and related Palo Alto Networks products.
Primary source: CERT-In2026-10-15 · GlobalChrome October 15 update addresses critical prerender flaw
Google's October 15 Chrome desktop release addressed ten security vulnerabilities.
Primary source: Google Chrome Stable2026-10-14 · IndiaIvanti security advisory raises concerns for Connect Secure deployments
CERT-In warns that affected Ivanti products may permit unauthorized access and command execution.
Primary source: CERT-In2026-10-14 · IndiaCERT-In flags security flaws across Microsoft cloud products
CERT-In warned of critical vulnerabilities in multiple Microsoft online and cloud services.
Primary source: CERT-In2026-10-14 · OceaniaAustralia urges businesses to secure refrigeration and other connected operational technology
Australia's ACSC warned operators of internet-connected cooling and industrial systems to reduce external exposure following reported overseas incidents, while noting it had not seen active targeting in Australia.
Primary source: Australian Signals Directorate / ACSC2026-10-13 · GlobalChrome security update fixes critical browser memory vulnerabilities
Google's October 13 desktop update included 37 security fixes, several rated critical.
Primary source: Google Chrome Stable2026-10-13 · Asia-PacificSingapore expands national cyber command centre for earlier threat detection and response
Singapore announced enhancements to its National Cybersecurity Command Centre, aiming to strengthen critical-infrastructure monitoring, malicious-domain protection, and coordinated response.
Primary source: Cyber Security Agency of Singapore2026-10-12 · IndiaAtlassian Data Center products exposed to file access vulnerability
A critical file-access flaw affects multiple Atlassian Data Center products according to CERT-In.
Primary source: CERT-In2026-10-09 · IndiaMikroTik RouterOS SSH rekey-state bypass warning
CERT-In warned that vulnerable RouterOS versions could permit unauthorized pre-authentication SSH operations.
Primary source: CERT-In2026-10-06 · GlobalChrome October 6 stable release includes extensive security fixes
Google announced desktop Chrome 155.0.8059.39/.40 with a large set of security corrections.
Primary source: Google Chrome Stable2026-10-06 · IndiaAndroid October security advisory covers framework and system issues
CERT-In identified multiple Android vulnerabilities affecting several supported OS generations.
Primary source: CERT-In2026-10-06 · EuropeUK NCSC notes ASOS investigation into possible exposure of customer information
The UK National Cyber Security Centre listed an October 6 update concerning ASOS, which said it was investigating a cyber incident and possible access to some customer personal information.
Primary source: UK National Cyber Security Centre2026-10-05 · IndiaCERT-In flags security weaknesses in Firefox and Thunderbird
Firefox, Firefox ESR and Thunderbird users should check for security updates following an October 5 advisory.
Primary source: CERT-In2026-10-02 · IndiaCERT-In warns of critical path traversal affecting Fortinet FortiMail
FortiMail email security appliances require urgent review following a critical path traversal warning.
Primary source: CERT-In2026-10-01 · GlobalChrome desktop security update addresses multiple vulnerabilities
October 1 Chrome desktop update addressed security weaknesses; administrators should apply the latest stable version.
Primary source: Google Chrome Stable