Weekly digest · week 42

12 to 18 October 2026

26 Major stories, 9 flaws added to CISA's exploited list and 2 breached listed companies. Busiest country: United Arab Emirates.

Major stories: 26Major stories10 more than the week before
Medium stories: 276Medium stories170 more than the week before
stories about flaws on CISA's list: 6stories about flaws on CISA's list1 more than the week before
flaws added to CISA's list: 9flaws added to CISA's list4 more than the week before
countries named in incidents: 27countries named in incidents8 more than the week before
breached listed companies: 2breached listed companies1 more than the week before

The biggest stories

Major. Zero-day

BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs

Dark Reading and 2 more · 2026-10-16
Major. CISA says it's being exploited

Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles

Dark Reading and 2 more · 2026-10-14
Major. CISA says it's being exploited

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

BleepingComputer and 1 more · 2026-10-15
Major. CISA says it's being exploited

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

The Hacker News and 1 more · 2026-10-15
Major. CISA says it's being exploited

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

The Hacker News · 2026-10-16
Major. CISA says it's being exploited

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

The Hacker News · 2026-10-15
Major. Zero-day

Cisco patches new Secure Email Gateway zero-day exploited in attacks

BleepingComputer and 1 more · 2026-10-14
Major. Reported as actively exploited

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

The Hacker News and 1 more · 2026-10-14

No events listed for the week after. Submit one.