📡 Tech & Security Digest — 2026-10-16
Curated from Hacker News, security blogs, and tech publications.
Ars Technica
- Fridge hack costing millions and sparking fires stemmed from poor security — Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet. …
BleepingComputer
- Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers — Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (ri…
- Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks — Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks…
- BeyondTrust patches zero-day exploited in attacks since August — BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late Au…
- UK Legal Aid Agency: Hackers stole records dating back to 1978 — The Legal Aid Agency (LAA), an executive agency of the UK’s Ministry of Justice that manages the country’s Public Defender Service, says attackers who…
Hacker News
- Major ICQ security hole (1998) (91 pts)
Krebs on Security
- FBI Arrests Executive at Ransomware Negotiation Firm — Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an inves…
- Microsoft Patches More Than 1,400 Security Flaws — Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch…
- ShinyHunters Extorted Boeing Spin-off Prior to Arrests — A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooper…
- Two Alleged ‘TeamPCP’ Hackers Arrested in Australia — Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrati…
The Hacker News
- China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers — The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondT…
- Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation — Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation.
The vuln…
- Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch — Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within…
- Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE — A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstac…
- AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches — Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop we…
- PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions — A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident …
- Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far — An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Vol…
- Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules — Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site’s server, and fixes were shipped on October 14 …
- Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability — Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating syste…
- Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App — Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three…