Thursday 22 October 2026

Hacking Desk

Hacking · Page 2

Stories 21–40 of 68, newest first. Back to the latest

  1. Hacking5 min read

    Palo Alto PAN-OS root flaw CVE-2026-0322 under attack

    Palo Alto says a management-interface bug that gives root on firewalls is seeing limited exploitation. CISA set a 17 October deadline.
  2. Hacking6 min read

    OFX breach exposed secret answers, customer email says

    OFX says no client funds were touched in its September hack, but a customer email lists secret answers among the stolen details.
  3. Hacking5 min read

    ACSC adds NetScaler SAML bug to its critical alert

    Australia's cyber agency has added CVE-2026-107406 to its NetScaler alert. Some builds that fixed the 3 October bug are still exposed.
  4. Hacking7 min read

    Japan breach wave: no JR leak found, Skyticket cards hit

    JR East, JR Kyushu and JR Tokai now say no leak was confirmed after the IDC Frontier attack. Skyticket admits card details leaked for up to 6,140 people.
  5. Hacking5 min read

    Icon Cancer Centre breach hit a fax-to-email supplier

    Icon Oncology says patient information was accessed on a supplier fax-to-email platform. A hacker claims more than 31,000 documents.
  6. Hacking5 min read

    FortiMail path traversal CVE-2026-104286 exploited

    Fortinet and CISA say an unauthenticated FortiMail path traversal that can write arbitrary files is being exploited in the wild.
  7. Hacking5 min read

    Fortinet path traversal CVE-2025-61624 joins CISA KEV

    CISA listed Fortinet's admin path traversal after Unit 42 showed attackers used it to plant the PEERSTITCH firewall implant.
  8. Hacking5 min read

    Microsoft patches Exchange flaw that reads other mail

    An out-of-band Exchange Server update fixes CVE-2026-96940, which lets a logged-in attacker read other users' mailboxes.
  9. Hacking5 min read

    Big Echo karaoke data at risk after contractor hit

    Daiichi Kosho says personal details on about 8.72 million Big Echo customers and staff may have leaked after malware hit a contractor PC.
  10. Hacking5 min read

    Cisco SD-WAN Manager auth bypass under attack

    Cisco and CISA warn that CVE-2026-76504, an authentication bypass in Catalyst SD-WAN Manager, is being exploited in the wild.
  11. Hacking5 min read

    Cisco ESA AMP flaw CVE-2026-76519 under attack

    Cisco says CVE-2026-76519, a new Secure Email Gateway flaw in its malware scanning feature, is under attack. CISA set a 17 October deadline.
  12. Hacking4 min read

    CenterPoint breach hits over 1 million Texans

    Houston TV reports on a Texas AG filing say CenterPoint Energy's September breach exposed personal data on more than a million customers.
  13. Hacking5 min read

    Burger King Japan app leak hits 11.18 million

    BK Japan's operator says about 11.18 million official-app membership records leaked after attackers got into the membership system.
  14. Hacking5 min read

    Atlassian file-read bug CVE-2026-21589 is under attack

    CISA added Atlassian's CVE-2026-21589 to its KEV list after honeypots saw exploitation attempts within two hours of a public write-up.
  15. Hacking5 min read

    ASOS says employee login theft led to HACKED alerts

    ASOS says a stolen employee login let attackers send "ASOS HACKED" app alerts on 6 October. Names and contact details were accessed, cards were not.
  16. Hacking22 min read

    BeyondTrust hack: how suspected China spies hid for a month

    Suspected Chinese spies got into BeyondTrust's help desk software on 29 August and hid for a month. Here's how they did it, and what to do now.
  17. Hacking6 min read

    China suspected in Beyond Gravity cyberattack, SRF says

    SRF says Swiss space firm Beyond Gravity and federal officials privately suspect China. Neither will confirm it, and data appears to have been taken.
  18. Hacking6 min read

    Meta admits its glasses recorded without 'Hey Meta'

    Meta says a bug that saved Ray-Ban Meta conversations without a wake word is fixed. It won't say what caused it, or what happened to the audio.
  19. Hacking5 min read

    Ivanti Connect Secure zero-days chained, one still unpatched

    CISA set a Friday deadline on CVE-2026-104935 after Volexity found a three-bug chain that gives unauthenticated root on Ivanti Connect Secure.
  20. Hacking5 min read

    CISA warns China-linked hackers are using automated tools

    CISA and allies, including Australia, say hackers enabled by China's Integrity Tech are scanning, spraying Exchange logins and stealing data worldwide.

Say hello in our guest book