Cybersecurity News
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There…
Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers
The cyberattack that disrupted refrigeration at hundreds of French supermarkets this week also affected equipment from Copeland and its Dixell brand, according…
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service…
Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules
Swati KhandelwalOct 15, 2026Vulnerability / Web Security Drupal core has a critical flaw in its Field UI module that could let an…
Police arrests 95 suspects in international CSAM crackdown action
Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution…
Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses…
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Ravie LakshmananOct 15, 2026Vulnerability / Network Security Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software…
CikaBika Bot RAT Uses Discord for C&C
Darktrace has uncovered a new malware campaign distributing a Rust-based RAT that relies on Discord for command-and-control (C&C). Dubbed CikaBika Bot, the…
Why AI Confidence Is Not Validation
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The…
India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1
Ravie LakshmananOct 15, 2026Telecom Security / Privacy The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display…