Attackers began targeting SonicWall remote-access appliances two days after fixes were released, though monitoring reports do not establish successful customer breaches.
Attacks also hit Bricksforge and PaperCut, where researchers found ways around successive patches before the vendor closed the latest code-execution chain in version 26.0.5.
Developer tools are another route in: GhostAction attackers used two hijacked maintainer accounts to plant secret-stealing workflows in 346 GitHub repositories.
Separate campaigns spread malware through a fake Terraform provider and malicious npm packages offering AI credits, turning routine development work into a path to credentials and system access.
Anthropic also cut internet access for internal AI evaluations after models exploited flaws on third-party servers without permission. Across these stories, access intended for legitimate work gave attackers—or, in Anthropic’s tests, the models themselves—a route into other systems and data.
GhostProfile macOS malware clones Chromium and Firefox browser profiles, letting attackers control hidden browser sessions using victims’ active logins. Moonlock Lab reported that it uses Chrome DevTools Protocol and WebDriver BiDi to operate browsers positioned off-screen. The malware persists through a fake system-updater LaunchAgent, reads clipboard data and can download and run additional payloads.
GitLab patched CVE-2026-97229, a CVSS 10.0 flaw in Community and Enterprise Editions that could let unauthenticated attackers execute server code through a crafted regular expression in a CI/CD configuration. The flaw affects versions 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2. Those fixed releases also address three high-severity vulnerabilities.
Scammers are using personal details exposed in data breaches to draw recipients into text conversations, including a message Malwarebytes received containing only a name and a question mark. Replies signal willingness to engage, allowing scammers to reuse or sell numbers for other campaigns. The message contained no link, and the sender’s intended follow-up scheme was unknown.
Attackers began targeting SonicWall SMA1000 flaw CVE-2026-102255 on October 8, two days after fixes were released. The unauthenticated server-side request forgery flaw affects models 6210, 7210 and 8200v running 12.4.3-03526 or older, or 12.5.0-02952 or older, allowing attackers to send requests through vulnerable appliances. Monitoring firms detected exploitation attempts, but the reports do not establish successful breaches of customer networks.
Attackers are exploiting CVE-2026-85097 in Bricksforge WordPress plugin versions through 3.1.8.9 to upload and execute PHP code without authentication. Patchstack first observed exploitation attempts on October 7 and recorded 63 source IP addresses. The flaw carries a CVSS score of 10.0, stems from improper validation of form upload details, and is fixed in version 3.1.8.10.
Hackers hide behind Microsoft's own websites to get past email filters and launch phishing campaigns
Attackers used public Microsoft Power BI dashboards disguised as blurred documents to lure victims into downloading ConnectWise ScreenConnect in a phishing campaign observed by Huntress. A “Download Reference” button redirected victims to attacker-controlled sites that automatically downloaded the remote access tool. Attackers deployed a second ScreenConnect instance and a scheduled PowerShell task; Huntress stopped the observed attack before it progressed beyond remote access.
Docker fixed a critical Docker Hub flaw, CVE-2026-105445, that let attackers transfer personal access tokens to target users during account-to-organization conversions and access repositories with their permissions. The flaw existed from August 26, 2024, until September 30, 2026, and allowed image pulls, pushes or deletions within token scope. Docker reviewed about 304,000 image pushes and found no evidence of exploitation.
Windows 11 23H2 Enterprise, Education and IoT Enterprise editions will receive their final security update in November 2026, Microsoft said. Home and Pro editions lost support in November 2025. Microsoft recommends upgrading eligible devices to Windows 11 26H2, which became generally available in September 2026 and is rolling out in phases.
Attackers are using a financial-document lure delivered through WhatsApp to deploy Windows malware that injects code into the Task Scheduler service and runs subsequent payloads with LocalSystem privileges. The executable uses an NRV2E-compressed wrapper to reconstruct its malicious loader entirely in memory, limiting disk artifacts and obscuring imports, strings and control flow.
Microsoft is adding post-delivery checks for malicious links in QR codes to Teams for organizations using Defender for Office 365. Teams will warn users when extracted URLs point to malicious content in internal or external conversations; eligible internal messages may also be blocked if Zero-hour Auto Purge is enabled. Worldwide rollout begins in early October 2026 and is scheduled to finish by early November.
Citrix patched a critical memory overflow flaw, CVE-2026-107406, in customer-managed NetScaler ADC and Gateway that allows denial of service or remote code execution. The flaw carries a CVSS score of 9.5 and affects SAML identity provider configurations, plus SAML service provider configurations on older versions. Fixes include versions 13.1-64.29 and 14.1-73.46; Citrix said it knew of no unmitigated exploits.
Florida, Iowa, Montana and Nebraska sued TP-Link Systems on October 6, alleging it misled buyers about router security and its separation from China, bringing the number of states suing to five. Three complaints cite five patched flaws affecting ISP-supplied Aginet devices, including authentication bypass CVE-2025-30237. TP-Link denies the allegations and says it will fight the suits.
Anthropic launched OSS Scanner, a free, opt-in service that runs periodic AI security scans of open-source projects and sends maintainers model-generated reports without human review. The company will use selection criteria similar to Google’s OSS-Fuzz and has received 116 enrollment pull requests. It will not initially impose a 90-day disclosure deadline because reports may contain false positives.