Cybersecurity

Cyberattacks, vulnerabilities, data breaches, ransomware, threat intelligence and security responses.

  1. D-Link’s interim advice is to disable DDP on the switch and applicable interfaces; the company said this stopped tested DDP attack paths.

  2. Docomo’s estimate puts the affected records at up to 300,000; emergency maintenance on both services was still underway on November 6.

  3. Access requires identity verification; organisations must also use single sign-on and multi-factor authentication, with API access restricted by IP allowlisting.

  4. The flaw affects 10 GS1900 models; Zyxel says unauthenticated attackers on the local network could send a crafted HTTP request.

  5. Ubuntu’s proposed kernels for three LTS releases remain in qualification testing and are not included in upgrades by default.

  6. The NCSC says attackers are likely to use AI to target known flaws in older infrastructure technology by 2028.

  7. Binance said its zero-knowledge proof for ten tokens was expected by November 3, with checks showing backing of at least 1:1.

  8. Binance said it had replenished about 90% of the affected assets by October 31, with its treasury and user fund covering the losses.

  9. Drupal recommends updating Commerce Core to a fixed release and reviewing orders for inconsistencies.

  10. Apple says the reported exploitation was extremely sophisticated and involved selected targets using iOS versions earlier than iOS 27.

  11. The flaw affects Brotli data processed by Node.js’s zlib module, with crashes, memory disclosure or code execution possible for attacker-supplied input.

  12. A cyber incident impacted services in Neshoba County, with email and website disruptions reported, according to company updates.

  13. A cyberattack began on 13 October 2026, targeting over 100 Azerbaijani state domains, disrupting government online resources, according to CERT.

  14. Regulators are increasing scrutiny on AI risks in banking. Compliance deadlines for cyber threats are set for October 2026, according to reports.

  15. Ahold Delhaize has taken IT systems offline due to a cybersecurity incident, disrupting services for brands including Albert Heijn and Food Lion.

  16. A security incident involving a third-party provider has been identified, according to company statements. Client personal data may be at risk.

  17. Veeam released Backup & Replication build 12.3.2 P4 on October 6, 2026, fixing critical vulnerabilities, including remote code execution issues.

  18. President Trump announced the Super Intelligence Force on October 4, 2026, to oversee AI advancements, with a report due in 120 days.

  19. A statement outlines emerging threats to financial stability, including cyber risks and geopolitical tensions, according to the regulator.

  20. GitLab issued patches for a critical AI Gateway vulnerability. Users should update to versions 19.2.4, 19.3.2, or 19.4.1, according to the company.