Date saved: 2026-10-19 18:00 (PDT)
Sources: Senthorus, IT Security News, Aviatrix, CyberBreachNet, TechTarget
Key findings
Major Data Breaches
- Senthorus (Oct 5-11, 2026): The US Department of Defense's Defense Manpower Data Center (DMDC) confirmed a massive breach affecting over 3 million military personnel and veterans. Unauthorized users accessed unencrypted personnel records via a file-sharing vulnerability between October 2025 and July 2026, exposing names, Social Security numbers, birth dates, contact details, and military occupational information. (Source)
- Senthorus (Oct 5-11, 2026): Japanese car-sharing service Times Car disclosed a breach impacting 6.6 million accounts, with identity-verification documents including driver's licenses leaked for 1.6 million users. Fakturownia, a Polish online invoicing platform used by over 600,000 businesses, suffered a breach exposing account and company information, password hashes, bank account details, and authentication tokens. Arizona's state court system was compromised after an employee clicked a malicious link, exposing backup files containing protective-order records and over 150,000 Foster Care Review Board reports. (Source)
- IT Security News (Oct 15, 2026): Eight major 2026 data breaches have affected organizations including Medtronic, Canvas, and DentaQuest, demonstrating continuous vulnerability of sensitive healthcare records. Retailer TFG London experienced a cyber incident forcing several IT systems offline and disrupting online orders across brands like Hobbs and Whistles. (Source)
Critical Vulnerabilities & Zero-Days
- IT Security News (Oct 15, 2026): CISA issued an urgent warning about CVE-2026-104935, a high-severity authentication bypass vulnerability in Ivanti Connect Secure being actively exploited as a zero-day since October 1, 2026. Microsoft released a record 1,415 security fixes in its October update, addressing actively exploited zero-days and critical remote code execution bugs. A critical Linux kernel bug dubbed PwnEscape allows virtual machine guests to read host memory, bypassing core hypervisor isolation boundaries. (Source)
- CyberBreachNet (Oct 19, 2026): A Broadcom Wi-Fi flaw dating back to 2010 allows attackers within Wi-Fi range to execute code on vulnerable routers without authentication. A Rust-based bot named CikaBika turns Discord into a command center, using fake documents to infect Windows systems, then abusing Discord and Ngrok to execute commands, spy on victims, and steal files. (Source)
- TechTarget (Oct 2026): An AI audit of Curl unearthed a 25-year-old authentication flaw in code powering 20 billion devices, proving heavily scrutinized legacy libraries still harbor hidden risks. CISA added actively exploited flaws in Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway to its Known Exploited Vulnerabilities catalog. (Source)
Ransomware, Nation-State Attacks & Arrests
- Aviatrix (Oct 2026): North Korean state-sponsored hackers exploited third-party zero-day vulnerabilities to steal $387 million from the Bitget cryptocurrency exchange. International law enforcement dismantled the KillSec ransomware operation, arresting key members including a 16-year-old administrator. CISA added five security flaws exploited by the China-linked Flax Typhoon group to its KEV catalog, requiring federal agencies to patch or discontinue affected software by October 11. (Source)
- Senthorus (Oct 5-11, 2026): South Africa's air navigation provider was hit by ransomware, disrupting operational technology supporting aviation weather services. Citrix issued urgent patches for critical NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) actively exploited in the wild, attackers leveraged these flaws to gain remote access, deploy web shells, steal credentials, and move laterally. The FBI arrested a suspected co-conspirator of the ShinyHunters extortion group, which had claimed responsibility for high-profile breaches including the FBI's jobs portal. (Source)
- IT Security News (Oct 15, 2026): Cisco disclosed a critical authentication bypass vulnerability (CVSS 9.8) in Catalyst SD-WAN Manager allowing unauthenticated remote attackers to gain administrator access with active exploitation reported but no patch available. Apple released emergency patches for a CoreGraphics memory corruption vulnerability exploited in targeted attacks. Fortinet disclosed active exploitation of a critical FortiMail vulnerability (CVSS 9.8). Cisco Talos and Recorded Future exposed Silent Lynx, a Kazakhstan-nexus threat group conducting cyber espionage against Russian energy and government sectors. (Source)
Source links
- Senthorus: Cybersecurity Week in Review: October 5-11, 2026
- IT Security News: IT Security News Roundup: 2026-10-15 Evening
- Aviatrix: Defense/Space Cyber Threats & Breach Reports
- CyberBreachNet: 16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password
- TechTarget: Historic Curl flaw shows AI risk to legacy supply chain