Weekly digest · week 43

19 to 25 October 2026

22 Major stories, 8 flaws added to CISA's exploited list and 1 breached listed company. Busiest country: United States.

Major stories: 22Major stories4 fewer than the week before
Medium stories: 77Medium stories199 fewer than the week before
stories about flaws on CISA's list: 8stories about flaws on CISA's list2 more than the week before
flaws added to CISA's list: 8flaws added to CISA's list1 fewer than the week before
countries named in incidents: 17countries named in incidents10 fewer than the week before
breached listed company: 1breached listed company1 fewer than the week before

The biggest stories

Major. CISA says it's being exploited

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

The Hacker News and 1 more · 2026-10-23
Major. CISA says it's being exploited

PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking

The Hacker News · 2026-10-25
Major. 7 rated Major

Microsoft: 25 security advisories this week

Microsoft MSRC · 2026-10-25
Major. CISA says it's being exploited

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The Hacker News · 2026-10-24
Major. CISA says it's being exploited

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

The Hacker News · 2026-10-23
Major. CISA says it's being exploited

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The Hacker News · 2026-10-21
Major. CISA says it's being exploited

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

The Hacker News · 2026-10-20
Major. CISA says it's being exploited

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

The Hacker News · 2026-10-20

No events listed for the week after. Submit one.