Section · 26 articles · page 1/2
Threats, vulnerabilities, incidents and best practices: cybersecurity news decoded.
Ivanti has patched CVE-2026-104935, exploited since early October on its VPN gateways. But the attack chain also relies on a privilege escalation flaw that remains unpatched.
In its October 13 Patch Day, SAP fixes a critical flaw in the Cloud SDK for Python that could expose OAuth2 secrets, along with three other critical vulnerabilities.
Docker has fixed CVE-2026-105445: by converting an account into an organization, an attacker could act on the registry as another user. Docker found no evidence of exploitation.
Microsoft ends updates for Windows 11 24H2 Home and Pro on October 13, 2026. Windows Server 2022 leaves mainstream support the same day. Here is how to check your version and migrate.
Let's Encrypt is cutting the lifetime of its TLS certificates from 90 to 64 days in February 2027, then to 45 days in 2028. Testing begins October 14: now is the time to check your renewals.
Flaw CVE-2026-85097 lets an unauthenticated attacker take over a WordPress site running Bricksforge. Patchstack has observed automated attacks. Users should update to version 3.1.8.10.
Since October 11, Ahold Delhaize has taken part of its systems offline. Websites, apps and online orders are disrupted in Belgium, the Netherlands and the United States.
After the forced defrosting of hundreds of supermarkets, CERT-FR reports numerous compromises of Danfoss controllers. Danfoss blames outdated equipment, and the Paris prosecutor's office is investigating.
On October 12, GitLab fixed 24 vulnerabilities, including CVE-2026-97229, which could allow unauthenticated code execution on the server. Self-hosted installations must be updated.
The crypto wallet maker found an unauthorized implant in a device sold by a Southeast Asian reseller. According to researchers, between $86 million and $93 million may have been stolen.
Overnight on October 11–12, hackers remotely altered the temperature of refrigerated display cases in supermarkets across France. The Paris prosecutor's office has opened an investigation; Danfoss, a supplier to Les Mousquetaires, was reportedly targeted.
The GlobalProtect vulnerability patched in May is still an entry point for ransomware. On October 11, ReliaQuest named the Qilin and Settra groups. Updating is not enough: organizations must also hunt for suspicious VPN access.
A hacker scraped École 42's internal directory using a user account with legitimate access, then put the profiles up for sale on October 9. The school filed a complaint and notified the CNIL, the French data protection authority. No passwords are believed to be involved.
Edward Dubrovsky, co-founder of CYPFER, a firm that negotiates with ransomware operators, was arrested on October 8 in Pennsylvania. The press links the case to the ShinyHunters group, but the FBI has not confirmed it.
A 28-year-old Russian suspected of being a leader of the Qilin ransomware group was arrested in Japan and transferred to Germany, authorities in North Rhine-Westphalia announced on October 7.
A hacker has claimed since October 10 to have breached Infogreffe. The organization acknowledges a "minor" incident on a platform still in development. The published sample is far more limited than the announcement.
Since October 7, hackers have been exploiting two vulnerabilities in the AhsayCBS backup server. Version 10.3.4.0 did not fix them: Ahsay is urging customers to install patch 10.3.4.45.
On October 8, Citrix released a patch for CVE-2026-107406, a flaw rated 9.5 out of 10 that affects NetScaler ADC and Gateway in SAML configurations. Citrix is not aware of any exploitation at this stage.
A hacker claims to be selling a database of 62,848 records of France Travail agents and partners. The agency has not confirmed the breach and says it is carrying out the necessary checks. The risk of targeted phishing is real.
IDC Frontier, a SoftBank subsidiary, confirmed that a ransomware attack took down one region of its IDCF Cloud on October 7, affecting 495 businesses and local authorities.
Microsoft warns that Windows Update certificates expire on May 17 and June 19, 2027. PCs and servers not updated by then will no longer receive any security updates.
France's national family allowance fund (Cnaf) has confirmed a "cybersecurity incident" at Vacaf, the CAF vacation aid program. Bank details and passwords reportedly are not affected, but beneficiaries should stay alert to scams.
Patched on October 6, a maximum-severity flaw in SonicWall SMA1000 remote access gateways is already the target of exploitation attempts. Administrators should apply the patch without delay.
Two critical NetScaler ADC and Gateway vulnerabilities allow remote code execution and are being exploited worldwide. CISA's alert, updated on October 9, now covers ten CVEs.
