Cyber ·
Reports point to espionage targeting AI firms and Asian governments
Two cybersecurity company reports describe intrusion operations linked to China, including phishing that impersonated Western experts.
Cyber
Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
Well-being and cyber defense in Threat Source
The October 1, 2026 edition of the Threat Source newsletter combines a reflection on workplace well-being with defensive strategies to make cyber adversaries’ operations harder.
Cyber ·
USN-8863-1: GStreamer plugin vulnerabilities
A security notice published on October 1, 2026 reports flaws in GStreamer Good Plugins when processing FLAC streams, AVI files and subtitle data, with possible information exposure and denial-of-service impacts.
Cyber ·
Android: six advanced protection measures
Published on October 1, 2026, the text presents Android Advanced Protection features intended to address sophisticated threats and protect data. The supplied source does not detail the six measures.
Cyber ·
European operation targets ransomware service KillSec
Published on October 1, 2026, the report says European authorities carried out operations against the KillSec ransomware service and arrested an adolescent suspect described as a prominent figure.
Cyber ·
Kernel faces a surge in vulnerability reports
A report on Greg Kroah-Hartman’s Kernel Recipes 2026 talk: the rise in vulnerability reports facilitated by LLMs and how the kernel security team is responding.
Cyber ·
Rust 1.99.0 adds variadic extern “C” functions
Released on October 1, 2026, Rust 1.99.0 includes support for variadic extern “C” functions, stabilized APIs, and functions to query raw pointer size and alignment.
Cyber ·
Security updates across Linux distributions
An October 1, 2026 bulletin lists security updates from AlmaLinux, Debian, Fedora, Mageia, Red Hat, Slackware, SUSE, and Ubuntu for a broad range of packages.
Cyber ·
USN-8862-1: libXpm flaw may cause denial of service
A security notice published on October 1, 2026 reports excessive resource consumption when processing XPM images with dimensions set to zero.
Cyber ·
Polish billing platform attack may expose customer data
Published on October 1, 2026, the report says a breach at one of Poland’s leading online billing platforms may have exposed information belonging to users, customers, and business partners.
Cyber ·
USN-8861-1: OpenSSL vulnerabilities
A security notice published on October 1, 2026 reports two vulnerabilities in OpenSSL QUIC streams that may cause denial of service through excessive CPU or memory consumption.
Cyber ·
ABB PCM600 flaws may raise privileges and write outside a directory
A CISA advisory published on October 1, 2026 describes two vulnerabilities in ABB PCM600, used in the energy sector: one in Scheduler Service and another in project-file extraction. It reports risks of privilege escalation and writing outside the intended location.
Cyber ·
Alert: EasyIO Neo controllers vulnerable
CISA advisory on CVE-2026-64893: specific versions of Johnson Controls EasyIO Neo EC and CW controllers may transmit sensitive data in cleartext. The recommendation is to update and secure management communications.
Cyber ·
Alert: flaws in CISA Malcolm
An advisory published on October 1, 2026 lists flaws in CISA Malcolm, including XSS, command injection and path traversal. Version September 2026 or later fixes the issues.
Cyber ·
CISA warns of critical Armatura One vulnerabilities
A CISA advisory dated October 1, 2026, reports risks of code execution, unauthorized access, and credential exposure in Armatura One. The stated severity reaches CVSS 9.8.
Cyber ·
CISA adds FortiMail flaw to KEV catalog
On October 1, 2026, CISA added CVE-2026-104286, a path traversal flaw in Fortinet FortiMail, to the KEV catalog, citing evidence of active exploitation.
Cyber ·
EasyIO Neo alert: flaw exposes information
A CISA-attributed advisory describes CVE-2026-64892 in versions of Johnson Controls EasyIO Neo Series EC and CW controllers. Fixed firmware is available; updates in industrial environments require operational planning.
Cyber ·
CISA warns of Meari IoT Cloud authorization flaws
A notice published on October 1, 2026 describes two authorization flaws in the Meari IoT Cloud OpenAPI Service, affecting all versions. The issues could expose device data and permit unauthorized changes.
Cyber ·
Critical flaws may affect Monta charging stations
A CISA alert dated October 1, 2026 reports authentication and session flaws in Monta monta.app that could enable unauthorized administrative control or disruption of charging services.
Cyber ·
USN-8860-1: OpenStack Designate flaw
A notice published on October 1, 2026 reports incorrect validation of overlapping DNS zones in OpenStack Designate. An authenticated user could redirect traffic or cause denial of service.