Canonical confirms second major DDoS attack on Ubuntu sites this year
On October 8, Canonical said its websites were under a sustained distributed denial-of-service attack, marking the second major such incident in 2026.
patch
-
-
-
Atlassian discloses critical flaw exploited within hours; Let’s Encrypt cuts TLS lifetime
The Hacker News noted that Atlassian disclosed CVE-2026-21589, a critical flaw in Data Center products exploited within two hours of technical details being released.
-
Attackers hijack Danfoss fridge controllers, raise temps in French supermarkets
Sources reported that the defrost manipulation heated refrigeration units to 50°C, spoiling frozen and fresh food.
-
Park24 reports third-party accessed 6.6 million Times Car accounts
Monogatari Corporation reported on October 5, 2026 that 10,788,963 records leaked from its Yakiniku King app member system.
-
Help Net Security and Vuln Herald Forecast Office‑Cleanup Focus for October 2026 Patch Tuesday After September’s Microsoft Update
The forecast urges prioritizing high‑risk systems and Office updates while noting that the two Known Exploited flaws from September—CVE‑2026‑85880 and CVE‑2026‑81963—remain critical for immediate patching.
-
Guides outline steps to detect and remove spyware on iOS and Android phones
Trusted anti‑spyware tools such as Malwarebytes for Mobile and Bitdefender Mobile Security are recommended in multiple guides and are available from official app stores.
-
Talos Intelligence newsletter says isolating legacy check‑printing devices keeps payroll running when patches aren’t possible
Pierre Cadieux of Cisco Talos describes how separating the devices onto a network segment that blocks internet traffic reduced exploit risk while allowing checks to keep printing.
-
Operational Technology Cybersecurity Coalition Urges CISA to Issue Binding Security Directive for Federal Agencies
A report released on Oct. 6, 2026, calls on the cybersecurity agency to set mandatory operational technology standards across federal civilian departments.
-
Warlock Exploits SharePoint Flaws to Disable Defenses and Deploy Ransomware in Critical Infrastructure Attacks
The China‑linked group, also tracked as Gold Salem, Longlegs and Storm‑2603, uses unpatched SharePoint servers to gain access, exfiltrate machine keys, and distribute ransomware via SYSVOL in recent hits on water, telecom, government and education targets.
-
In early 2026 Project Zero revisited CVE-2024-54529 in the Sound Barrier series
A look back at the type‑confusion flaw in macOS CoreAudio, how researchers built an exploit, Apple’s December 2024 patches and the guidance that followed.
-
FBI Updates FortiBleed Warning as Attackers Lock Out FortiGate Admins Before Ransomware
The joint FBI‑Secret Service advisory shows threat actors using stolen credentials to seize administrator accounts, lock out legitimate owners, and hand access to ransomware affiliates, and details mitigations that go beyond patching.