News Archive
Browse past reporting month by month. Historical reports are grouped by the original source date when available, rather than the day they were added to CyberGeek News.
October 2026
30 matching stories
Firefox and Thunderbird security updates cover multiple critical weaknesses
CERT-In lists critical Mozilla vulnerabilities affecting Firefox, Firefox ESR and Thunderbird releases.
Source: CERT-In · Read full storyApache Tomcat authentication bypass and cross-user response warning
CERT-In warns of multiple Tomcat vulnerabilities affecting supported 9, 10 and 11 branches.
Source: CERT-In · Read full storyZoom Workplace clients receive security vulnerability warning
CERT-In warns of privilege escalation and sensitive-information exposure affecting certain Zoom Workplace clients.
Source: CERT-In · Read full storyGoAhead embedded web server affected by TLS-related vulnerabilities
CERT-In identifies multiple vulnerabilities in GoAhead Web Server versions used by networked and embedded products.
Source: CERT-In · Read full storyCanada warns of help-desk impersonation calls stealing cloud sign-in sessions
Canada's cyber centre reports an ongoing voice-phishing campaign against organisations, particularly legal and financial firms, using fake IT calls and lookalike sign-in pages to capture authentication sessions.
Source: Canadian Centre for Cyber Security · Read full storyChrome October 27 stable update addresses critical FileSystem flaws
Google's October 27 release lists 52 security fixes, including critical use-after-free vulnerabilities.
Source: Google Chrome Stable · Read full storycurl and libcurl HTTP/2 use-after-free vulnerability reported
CERT-In reports a use-after-free issue that may affect curl/libcurl HTTP/2 upload handling.
Source: CERT-In · Read full storyOracle Java and GraalVM certificate validation vulnerability
CERT-In advises Oracle Java SE and GraalVM users to check affected builds and apply security updates.
Source: CERT-In · Read full storyISC BIND DNS servers require security review
CERT-In warns about vulnerabilities in affected ISC BIND 9 releases which could disrupt DNS services.
Source: CERT-In · Read full storyINTERPOL reports 1,462 arrests in Africa-wide cybercrime crackdown
Operation Serengeti III coordinated action across 21 countries, with INTERPOL reporting over $105 million in recovered funds, 10,909 disrupted malicious networks and nearly 66,000 identified victims.
Source: INTERPOL · Read full storyJapan's JPCERT links AI-assisted API probing to unauthorised access investigations
Japan's JPCERT/CC analysed attack infrastructure used in incidents affecting local organisations and found evidence of AI-assisted vulnerability scanning and tests against mobile-application APIs, including services outside Japan.
Source: JPCERT/CC · Read full storyEuropean cyber agencies urge urgent PHP patches for two critical server vulnerabilities
ENISA, CERT-EU, Europol and European partners warned of two PHP weaknesses, CVE-2026-109618 and CVE-2026-109619, which could enable unauthenticated remote code execution in affected environments.
Source: ENISA / European Commission · Read full storyBrazilian university restricts public access to systems amid critical PHP vulnerability response
Brazil's UFCG temporarily limited internet access to systems including SEI, GLPI, Moodle and OJS while patching critical PHP vulnerabilities, illustrating the operational impact of emergency security measures.
Source: Federal University of Campina Grande (Brazil) · Read full storyUS and international agencies warn SafePay ransomware has hit hundreds of organisations
A joint CISA and FBI advisory says SafePay ransomware has affected at least 600 organisations across the Americas, Europe and Australia since August 2024. Investigators describe stolen credentials, vulnerable edge systems and attacks on backups.
Source: CISA / FBI joint advisory · Read full storySonicWall SMA 1000 appliances face multiple critical vulnerabilities
CERT-In advises administrators to patch SMA 1000 appliances after multiple high-impact flaws were disclosed.
Source: CERT-In · Read full storyPalo Alto Networks PAN-OS and GlobalProtect security updates urged
CERT-In listed multiple weaknesses affecting PAN-OS, Prisma Access and related Palo Alto Networks products.
Source: CERT-In · Read full storyChrome October 15 update addresses critical prerender flaw
Google's October 15 Chrome desktop release addressed ten security vulnerabilities.
Source: Google Chrome Stable · Read full storyIvanti security advisory raises concerns for Connect Secure deployments
CERT-In warns that affected Ivanti products may permit unauthorized access and command execution.
Source: CERT-In · Read full storyCERT-In flags security flaws across Microsoft cloud products
CERT-In warned of critical vulnerabilities in multiple Microsoft online and cloud services.
Source: CERT-In · Read full storyAustralia urges businesses to secure refrigeration and other connected operational technology
Australia's ACSC warned operators of internet-connected cooling and industrial systems to reduce external exposure following reported overseas incidents, while noting it had not seen active targeting in Australia.
Source: Australian Signals Directorate / ACSC · Read full storyChrome security update fixes critical browser memory vulnerabilities
Google's October 13 desktop update included 37 security fixes, several rated critical.
Source: Google Chrome Stable · Read full storySingapore expands national cyber command centre for earlier threat detection and response
Singapore announced enhancements to its National Cybersecurity Command Centre, aiming to strengthen critical-infrastructure monitoring, malicious-domain protection, and coordinated response.
Source: Cyber Security Agency of Singapore · Read full storyAtlassian Data Center products exposed to file access vulnerability
A critical file-access flaw affects multiple Atlassian Data Center products according to CERT-In.
Source: CERT-In · Read full storyMikroTik RouterOS SSH rekey-state bypass warning
CERT-In warned that vulnerable RouterOS versions could permit unauthorized pre-authentication SSH operations.
Source: CERT-In · Read full storyChrome October 6 stable release includes extensive security fixes
Google announced desktop Chrome 155.0.8059.39/.40 with a large set of security corrections.
Source: Google Chrome Stable · Read full storyAndroid October security advisory covers framework and system issues
CERT-In identified multiple Android vulnerabilities affecting several supported OS generations.
Source: CERT-In · Read full storyUK NCSC notes ASOS investigation into possible exposure of customer information
The UK National Cyber Security Centre listed an October 6 update concerning ASOS, which said it was investigating a cyber incident and possible access to some customer personal information.
Source: UK National Cyber Security Centre · Read full storyCERT-In flags security weaknesses in Firefox and Thunderbird
Firefox, Firefox ESR and Thunderbird users should check for security updates following an October 5 advisory.
Source: CERT-In · Read full storyCERT-In warns of critical path traversal affecting Fortinet FortiMail
FortiMail email security appliances require urgent review following a critical path traversal warning.
Source: CERT-In · Read full storyChrome desktop security update addresses multiple vulnerabilities
October 1 Chrome desktop update addressed security weaknesses; administrators should apply the latest stable version.
Source: Google Chrome Stable · Read full story