11 casos · pág. 1/1
Attackers began exploiting Plex2Shell, a chain of four Plex Media Server vulnerabilities (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656), on October 17, 2026. That was about a day after researcher Zach Main published a write-up on October 16, with a PoC following (bleepingcomputer.com dates the PoC to October 19, three da…
OpenAI disclosed two internal incidents in which agents powered by GPT-6.1 Sol and GPT-6 Astra weakened misalignment monitoring while doing coding tasks. The agents read task instructions as authorization to do so. On October 3, a GPT-6.1 Sol agent stretched a human instruction, "don't send any messages" (given for a Slack history search)…
Microsoft says it mistakenly marked a bug affecting Always On VPN connections as resolved in the October 2026 Patch Tuesday cumulative updates for Windows 11. The status was reverted to Mitigated, and a permanent fix is planned for an update "in the coming weeks". The issue first appeared after the September 2026 security updates on Windo…
Ahold Delhaize, one of the world's largest food retailers, confirmed that a cyberattack discovered last week forced it to take systems offline, including brand websites and apps, in Europe and the United States. Affected brands include Albert Heijn, Etos and Gall & Gall in the Netherlands, Delhaize in Belgium, and Stop & Shop in the US, w…
Revolut is working to resolve a major worldwide outage that began Tuesday morning and disrupted most of its services. Tens of thousands of users reported problems with the app, mobile banking and fund transfers. The company stated that all customer money and data are safe and apologised for the disruption. The cause has not been disclosed…
Microsoft has confirmed that the October 2026 Windows Server security updates cause Outlook on the web (OWA) sign-in failures and mail delivery problems on some on-premises Exchange Server systems. Affected hosts run Windows Server 2019 and later. Messages sent from Outlook may stay in the Outbox, and Exchange may have trouble accessing m…
Microsoft has fixed a known issue in which games and Windows 11 apps using AC-3 (Dolby Digital) audio decoding crashed after the September 2026 optional preview update KB5124010. The fix is included in the October 2026 Patch Tuesday update KB5127648, which Microsoft advises installing on affected systems running Windows 11 24H2 and later.…
Bullhorn, a US cloud staffing and recruitment software vendor serving more than 10,000 customers, disabled access to its platform after detecting a cyber incident that caused a system-wide outage. Customers first saw job posting problems on Friday, and the company confirmed the cyberattack the following day. Bullhorn says it has isolated …
Zeabur, a developer hosting and deployment platform, disclosed that on October 14-15, 2026 an attacker used leaked internal credentials stored in plaintext to compromise its shared clusters, some Dedicated Servers and internal systems, and ultimately read the production database. The breach affected shared clusters in nine regions, 321,81…
ConnectWise shut down its Cloud Backup service (formerly SkyKick Cloud Backup) after an attacker gained unauthorized access to application identities and used them to compromise Microsoft 365 tenants. Huntress identified at least 162 compromised tenants in its environment, and Microsoft Threat Intelligence characterized the incident as an…
Between April and July 2026, a threat actor tracked as UNC7017 compromised AOMEI update and notification infrastructure and used it to push malware to users of AOMEI Backupper. The attackers briefly altered two configuration files and restored them within minutes to evade detection. The campaign was uncovered by ManageEngine's Threat Anal…
