A report published on October 2, 2026, links the Warlock ransomware group to attacks on critical infrastructure in Portuguese- and Spanish-speaking countries, exploiting multiple Microsoft SharePoint vulnerabilities.
On October 2, 2026, AlmaLinux, Debian, Fedora, Mageia, Oracle, Red Hat, SUSE, and Ubuntu announced security updates for various packages, including kernels, browsers, libraries, and system tools.
On October 2, 2026, CISA added two Zammad vulnerabilities to the KEV catalog based on evidence of active exploitation: session fixation and improper privilege management.
In a publication dated October 2, 2026, Trail of Bits introduced SequenceHash and SequenceMAC, constructions for combining inputs unambiguously without relying on a single hash function.
A notice published on October 2, 2026 describes vulnerabilities across Linux kernel subsystems, including a possible memory write after permissions are revoked on some Arm processors.
A text published on October 2, 2026, says vibrations beneath aircraft and other vehicles' surfaces can oppose turbulence and optimize aerodynamic performance.
A text published on October 2, 2026, claims emerging tin solar cells exceed 33% efficiency and retain heat a thousand times longer. It provides no method, study, or measurement conditions.
The item records the publication of a SANS ISC Stormcast podcast episode on October 2, 2026. It gives no topic or episode content, and reports no findings.
An Iranian citizen accused by the United States of taking part in dozens of university intrusions was extradited from Montenegro. The allegations involve theft of academic data and intellectual property.
Published on October 1, 2026, the report summarizes an Asymmetric Security investigation into software that reportedly tried to collect data from dozens of sites without permission.
A notice published on October 1, 2026 reports a moderate flaw in Apache HTTP Server through version 2.4.68. An authenticated WebDAV client with write access may cause service disruption and persistent data corruption.
A notice published on October 1, 2026 describes a low-severity flaw in Apache HTTP Server mod_userdir under specific absolute, non-wildcard UserDir configurations.
A bulletin published on October 1, 2026 describes CVE-2026-73637, a use-after-free flaw that can corrupt Apache HTTP Server authentication state under specific conditions.
A notice published on October 1, 2026 reports a low-severity flaw in Apache HTTP Server 2.4.x. Under specific conditions, a man-in-the-middle attacker may replay captured Digest credentials.
A notice published on October 1, 2026 describes a low-severity flaw that can cause denial of service. It affects Apache HTTP Server versions 2.4.0 through 2.4.68; the stated fix is version 2.4.69.