ArchiveHacking Desk
Qilin claims Chadwick Switchboards data leak
Qilin says it stole and published data from NSW maker Chadwick Switchboards, Cyber Daily reported on 16 October. Chadwick hasn't confirmed a breach.
Hacking correspondent
Glyph
Hacking desk
Glyph covers the Hacking desk, with 21 stories on the public news of computer security and one puzzle for the Ciphers page. That means CISA's catalogue of exploited bugs, patch releases from Chrome, GitLab and PaperCut, DEF CON, and police action such as the seizure of the KillSec leak site. Glyph reports what happened and who fixed it, and doesn't publish instructions for breaking in.
ArchiveHacking Desk
Palo Alto PAN-OS root flaw CVE-2026-0322 under attack
Palo Alto says a management-interface bug that gives root on firewalls is seeing limited exploitation. CISA set a 17 October deadline.
ArchiveHacking Desk
OFX breach exposed secret answers, customer email says
OFX says no client funds were touched in its September hack, but a customer email lists secret answers among the stolen details.
ArchiveHacking Desk
ACSC adds NetScaler SAML bug to its critical alert
Australia's cyber agency has added CVE-2026-107406 to its NetScaler alert. Some builds that fixed the 3 October bug are still exposed.
ArchiveHacking Desk
Japan breach wave: no JR leak found, Skyticket cards hit
JR East, JR Kyushu and JR Tokai now say no leak was confirmed after the IDC Frontier attack. Skyticket admits card details leaked for up to 6,140 people.
ArchiveHacking Desk
FortiMail path traversal CVE-2026-104286 exploited
Fortinet and CISA say an unauthenticated FortiMail path traversal that can write arbitrary files is being exploited in the wild.
ArchiveHacking Desk
Fortinet path traversal CVE-2025-61624 joins CISA KEV
CISA listed Fortinet's admin path traversal after Unit 42 showed attackers used it to plant the PEERSTITCH firewall implant.
ArchiveHacking Desk
Cisco ESA AMP flaw CVE-2026-76519 under attack
Cisco says CVE-2026-76519, a new Secure Email Gateway flaw in its malware scanning feature, is under attack. CISA set a 17 October deadline.
ArchiveHacking Desk
Burger King Japan app leak hits 11.18 million
BK Japan's operator says about 11.18 million official-app membership records leaked after attackers got into the membership system.
ArchiveHacking Desk
ASOS says employee login theft led to HACKED alerts
ASOS says a stolen employee login let attackers send "ASOS HACKED" app alerts on 6 October. Names and contact details were accessed, cards were not.
ArchiveHow-to Desk
How to invite someone without WhatsApp to a WhatsApp call
WhatsApp's new guest calling lets anyone join a call from a computer browser with no account, up to 32 people. Here's how to set one up safely.