Weekly digest,
This week: CISA Adds 7 Flaws to KEV Amid Active Exploitation by Flax… (+9 more)
Vulnerabilities
CISA Adds 7 Flaws to KEV Amid Active Exploitation by Flax Typhoon
On October 11, 2026, CISA added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, increasing the total to 1,739. Notably, five of these vulnerabilities were linked to the China-based group Flax Typhoon, which has been exploiting bugs since 2015. The vulnerabilities, including CVE-2021-3199 and CVE-2015-3306, were confirmed to be actively exploited, highlighting the gap between theoretical severity and real-world exploitation. The Common Vulnerability Scoring System (CVSS) scores for these flaws remained unchanged, emphasizing the need for organizations to prioritize based on active exploitation rather than just CVSS scores. Security teams are urged to adopt a dual approach using both CVSS and CISA KEV to effectively manage vulnerabilities. The current landscape shows that relying solely on CVSS can lead to misprioritization and increased costs for organizations.
APT · 2 sources · score 76 · CVE-2015-3306, CVE-2021-3199, CVE-2023-22894, CVE-2026-104286, CVE-2026-88779
Critical Vulnerabilities Discovered in Atlassian Products
Two critical vulnerabilities have been reported in Atlassian products, CVE-2026-21589 and CVE-2026-102255. CVE-2026-21589, with a CVSS score of 9.3, was published on October 5, 2026, and its first public proof-of-concept (PoC) was released on October 7, 2026. CVE-2026-102255, published on October 7, 2026, has a CVSS score of 10.0 and is considered critical. Exploitation attempts against these vulnerabilities have reportedly begun. Organizations using affected Atlassian products are urged to apply patches immediately to mitigate risks. The vulnerabilities potentially expose sensitive data and systems to attackers. The situation is evolving, and further updates are expected as more information becomes available.
Vulnerability · 2 sources · score 73 · CVE-2026-102255, CVE-2026-21589, PoeLLM, The Fake AI Ads Campaign
Potential Manipulation of ETH Prices in $20M Papertrade Incident
On October 11, 2026, two wallets allegedly manipulated Ether (ETH) prices on the Hyperliquid platform by executing $20 million in trades, potentially affecting Papertrade's synthetic pricing. The trades moved ETH prices by 0.1% to 0.2%, raising concerns about the vulnerability of Papertrade's pricing mechanism, which relies on Hyperliquid's best bid and offer (BBO). Reports indicate that a trader exploited this mechanism to earn approximately $1.28 million in profit within eight hours by manipulating prices through large trade volumes. Despite community accusations and the acknowledgment of risks in Papertrade's documentation, there is no confirmed proof of the wallets' identities or losses incurred. As of now, the situation remains unresolved, with no official response from Papertrade and no compensation plans announced. The incident has led to increased trading volume for ETH, surpassing Bitcoin's, indicating heightened market activity linked to the exploit.
Vulnerability · 3 sources · score 59
Thugs Attack NDC Supporters at Enugu Airport, One Reported Dead
On October 10, 2026, thugs attacked supporters of the Nigeria Democratic Congress (NDC) at the Akanu Ibiam International Airport in Enugu State as they welcomed their governorship candidate, Christian Chinyeaka Ohaa. The incident reportedly involved gunfire and tear gas, with supporters claiming they were shot at while fleeing. NDC presidential candidate Peter Obi condemned the violence, stating that it has reportedly claimed one life. This attack follows a previous incident in September where NDC members were also assaulted during a grassroots meeting. The Enugu State Police and military were present but allegedly did not intervene during the attack. As of now, the identities of the attackers and the full extent of injuries remain unclear, with no official statements from security forces at the time of reporting.
Vulnerability · 2 sources · score 56
Breaches
WhatsApp Hack Exposes Netanyahu Aide's Private Messages Ahead of Elections
On October 11, 2026, WhatsApp messages attributed to Yonatan Urich, a senior adviser to Israeli Prime Minister Benjamin Netanyahu, were leaked online. The messages reportedly include discussions with various political and media figures. Urich confirmed that his WhatsApp was hacked, claiming the leakers would face legal consequences. The hack is linked to Urich's account being connected to an external service from the UAE, which may have allowed unauthorized access to his messages. The authenticity of the leaked messages has not been independently verified. The incident occurs amidst ongoing investigations into Urich's alleged involvement in corruption related to Qatar. The hacker claims to have more messages that will be released later. Urich has not provided further comments on the leak.
Breach · 4 sources · score 61 · Lighthouse, Qatargate
COLDCARD Investigates Phishing Scam on Official X Account
On October 11, 2026, COLDCARD's official X account posted a phishing link disguised as a security alert, prompting users to migrate their Bitcoin to a fraudulent site. The post claimed a critical vulnerability in the seed-generation process, exploiting fears from a prior $130 million theft incident in July 2026. COLDCARD confirmed no unauthorized logins or access records were found during their internal review, suggesting a possible platform-level compromise. The company has contacted X for an investigation and advised users against interacting with the phishing link. No confirmed financial losses have been reported as a result of this incident. Security experts warn that the phishing attempt is designed to collect recovery phrases from unsuspecting users. The incident highlights the ongoing risks associated with social engineering in the cryptocurrency space.
Breach · 13 sources · score 57
ASOS Cyber Incident Highlights Business Risks of Cybersecurity
ASOS experienced a suspected cyber incident that raised concerns about data security and operational integrity. Customers received notifications suggesting a compromise of company systems, leading to significant media attention and customer anxiety. The incident underscores the growing recognition of cybersecurity as a business risk rather than just an IT issue. The Cyber Security Breaches Survey 2025/2026 indicated that 43% of UK businesses faced cyber breaches, emphasizing the widespread nature of the threat. The exact nature of the attack method remains unclear, but it reflects a broader trend of increasing cyber threats targeting organizations across various sectors. Investigations are ongoing, and ASOS has not confirmed specific details regarding the breach. This incident serves as a reminder for businesses to enhance their cyber resilience and consider cyber insurance as part of their risk management strategy.
Breach · 2 sources · score 51
Also worth knowing
Scottish Universities on High Alert for Espionage Threats from China and Russia
Scottish universities have been warned of espionage risks following a rare MI5 briefing regarding the China General Technology Research Institute (CGTRI), which is linked to China's intelligence services. Tertiary Education Minister Alyn Smith has urged institutions to review their connections with CGTRI and take precautions against foreign interference. The MI5 alert, issued at the end of September 2026, is the first of its kind and emphasizes the need for universities to be vigilant about potential espionage activities. The briefing highlighted that over 100 UK-linked academics have engaged with CGTRI, raising concerns about the security of research and communications networks. Smith's communication to universities stresses the importance of due diligence in international collaborations, particularly with China. The Scottish Government is also seeking to attract Chinese investment, despite national security warnings. Institutions are encouraged to establish confidential reporting routes for any concerns regarding foreign interference.
Other Threats · 3 sources · score 64
Urgent Need for Post-Quantum Cryptography Preparation
As quantum computing technology advances, the risk to current encryption methods is increasing, prompting experts to urge immediate preparation for post-quantum cryptography (PQC). The 'harvest now, decrypt later' threat scenario poses significant risks to sensitive data that must remain confidential for years. Organizations are advised to transition to PQC, as existing cryptographic methods may soon be vulnerable to quantum attacks. The National Institute of Standards and Technology (NIST) has finalized PQC standards, but integrating them into existing systems is complex and requires careful planning. Key steps include identifying vulnerable cryptography and establishing robust key management programs. Experts emphasize that this transition is not a simple purchase but a lengthy process requiring proactive measures. Solution providers can assist clients in navigating these challenges and implementing necessary changes.
Other Threats · 2 sources · score 58
AI Threatens Blockchain Security, Urges Crypto Community to Prepare
Ethereum researchers are warning that advancements in AI could potentially compromise the cryptographic signatures securing Bitcoin and Ethereum wallets within months. Justin Drake, a prominent researcher, has called for the crypto community to enter 'bunker mode' by moving funds to new addresses that have never signed transactions, thus keeping public keys hidden. Vitalik Buterin, Ethereum's co-founder, echoed these concerns but advised caution against hasty migrations, citing risks of loss during wallet transitions. While no practical attacks have been demonstrated yet, the fear stems from AI's capability to solve complex mathematical problems that could theoretically allow hackers to derive private keys from public keys. The crypto community is also wary of quantum computing threats, which could further complicate cryptographic security. The situation remains fluid, with ongoing debates about the actual risk posed by AI advancements. Experts urge skepticism towards claims of AI breakthroughs in mathematics, emphasizing the need for robust cryptographic methods.
Other Threats · 2 sources · score 52
New on leak sites
252 victims listed on ransomware leak sites by 48 groups in the 7 days before this issue. The most active:
- thegentlemen43
- nightspire24
- qilin23
- n0n18
- safepay11
- incransom10
Get the next one by email
The digest is free and arrives once a week. One click to leave.
A free account turns the digest into a personal watchlist: choose what you want to follow.