Major Incidents or Breaches

• Platform-as-a-Service provider Railway disclosed anomalous activity indicating an intruder may have accessed customer environment variables, including potential secrets, and urged customers to rotate credentials immediately ^[6].
• Hackers compromised the infrastructure of Onamae Desktop Cloud, a major Japanese VPS provider, installing malware on up to 26,739 customer servers ^[21].
• LiteLLM, a popular Python package, was compromised in a supply chain attack. Threat actors bypassed multiple security controls to release a malicious version containing a credential stealer and backdoor ^[8][14].
• A developer’s GitHub account linked to OVHcloud was compromised and used to push malicious code to unsuspecting users ^[32].
• TiDB suffered a breach that exposed sensitive customer data due to flawed assumptions about cloud provider data handling ^[28].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Lazarus Group conducted Operation FlashHole, a sophisticated attack using a watering-hole technique and custom malware, targeting users of the CrossWeb EX financial security software ^[1].
• Attackers hijacked over 300 Tor exit relays to intercept SSH connections, redirecting them to malicious servers to steal login credentials ^[10].
• TeamUpdraft’s website was breached, resulting in the compromise of UpdraftCentral connection keys, which were then used to backdoor WordPress sites ^[12][24].
• State Bank of India confirmed a data leak after 3,897 customer records appeared on the dark web, though the source of the breach is still unknown ^[14].
• Zeabur, a development platform, is shutting down after a second security breach in two months. Attackers used leaked plaintext internal credentials to compromise infrastructure and steal over 10,000 API keys ^[27].
• A Belarus-aligned hacktivist group maintained access to a Russian healthcare organization for nearly two years, hiding the Vasilek backdoor in VMware Tools as part of the intrusion ^[16].
• AOMEI Backupper was compromised in a supply chain attack, serving users a downloader for the ShinyRoad modular backdoor framework during short compromise windows ^[48].
• A hijacked developer account was used to plant information-stealing malware in the OVHcloud CLI, with links to the GlassWorm loader ^[45].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• OVHcloud’s command-line interface tool had five releases compromised after an attacker hijacked a contributor’s GitHub account, replacing download archives with information-stealing malware. Users downloading the affected CLI releases were exposed to credential theft risk ^[8][16].
• Rank Math PRO, a widely used WordPress SEO plugin, was compromised in a supply chain attack. Official plugin packages downloaded or updated between October 15 and 16 were injected with a self-restoring backdoor, potentially impacting websites using the plugin ^[13][21][44].
• Ahold Delhaize, a major food retail chain, confirmed a cyberattack that disrupted services across stores in Europe and the United States ^[18].
• Nikkei Inc. disclosed its third data breach in a month, exposing 1.83 million personal information records, including names, addresses, email addresses, phone numbers, and dates of birth ^[20][40].
• ConnectWise experienced a security incident affecting its cloud backup services, prompting the company to reset credentials, strengthen administrative protections, and suspend cloud services while remediation continues. There are concerns regarding potential downstream impact on managed service providers (MSPs) ^[7][30][45].
• Staffing software provider Bullhorn took its platform offline to contain a cyberattack, resulting in a system-wide outage ^[23].
• OpenCode, an open-source AI coding project, reported a breach that exposed API keys used with external providers, linked to attacks targeting AI development environments ^[24].
• Attackers compromised AOMEI’s update servers, distributing malware via the backup software’s promotional feature. Malicious configuration files were briefly pushed before restoration ^[22][49].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• ConnectWise suspended its cloud services following a cyberattack, with services remaining offline during remediation and security validation^[13].
• Intruders used compromised credentials to access an ETS SFTP server, exfiltrating records of millions of California students dating back to 2006^[15][21].
• OpenCode suffered a breach of a legacy system, potentially exposing API keys for OpenAI, Anthropic, and Google that users had stored in the OpenCode Console^[6].
• Attackers hijacked AOMEI Backupper’s update servers to deliver malware capable of granting remote access to users’ PCs^[19].
• Threat actors weaponized the Plex2Shell exploit chain against Plex servers within hours of disclosure, delivering cryptocurrency miners and proxy software^[14].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• ConnectWise suspended its Cloud Backup service after unknown threat actors compromised Microsoft 365 tenants through a supply-chain attack. The attackers gained unauthorized access to ConnectWise application identities, prompting the company to disable seven application identities and shut down customer access to the affected service while the investigation continues ^[2][3].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Burger King Japan disclosed a breach exposing 11.18 million customer records after attackers accessed a server containing sensitive data including names, addresses, phone numbers, and order histories ^[12].
• A cyber incident at BAE Systems disrupted the US Bankruptcy Noticing Center, halting notices nationwide for a week ^[23].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Burger King Japan disclosed a significant data breach after attackers accessed a server containing 11.18 million customer records, including names, contact details, and order histories ^[13].
• The UK Legal Aid Agency confirmed that the scope of its recent hack is wider than initially believed, with compromised data covering applications, claims, and payments submitted between 2007 and 2025 ^[39].
• A cyberattack on BAE Systems disrupted the US federal bankruptcy court notice system nationwide for a week, affecting the Administrative Office of the US Courts ^[15][31].
• Roughly 700 French supermarkets were impacted by cyberattacks targeting refrigeration controllers from Copeland and Dixell. No group has claimed responsibility ^[40].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• The UK Legal Aid Agency confirmed that attackers who breached its IT systems in April 2025 stole records dating back to 1978, affecting sensitive data managed by the country’s Public Defender Service ^[18].
• CenterPoint Energy disclosed a data breach impacting 1 million Texans, with compromised personal information including names, addresses, Social Security numbers, and driver’s license numbers ^[39].
• GhostAction, a credential-theft campaign, compromised about 1,900 GitHub accounts and targeted over 30,000 repositories across 3,000 users and organizations, with a spike in activity observed on October 9 ^[9].
• Ledger requested resellers across multiple Asian markets to halt sales and remove products from shelves following a supply-chain attack ^[21].
• U.S. authorities disrupted North Korean IT worker fraud by shutting down over 40 “laptop farms,” charging 14 individuals, and seizing 187 computers and KVM devices. The operation targeted the Famous Chollima threat group ^[15][20].
• Law enforcement in 17 countries arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material ^[16].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• The UK Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday ^[29].
• TFG London experienced a cybersecurity incident disrupting IT systems used by Phase Eight, Hobbs, and Whistles premium fashion brands ^[31].
• Meta disclosed that hackers accessed code and personal data of 1,500 individuals in a GitHub breach, with most affected being Meta employees in the United States ^[53].
• An OpenAI employee was arrested for allegedly planting a hidden recording device in an executive conference room at the company’s San Francisco offices ^{[13][23][39][49]}.
• Advertising company Xandr, owned by Microsoft, was fined €8.6 million by the Norwegian Data Protection Authority for illegally relaying Grindr users’ sensitive data to advertisers ^[19][58].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Attackers remotely compromised refrigeration controllers at hundreds of French supermarkets, setting fridges and freezers to high temperatures and causing significant food spoilage. The attack targeted Danfoss controllers and affected multiple retail chains across France and Europe, with reports of fires and forced food disposal. Ahold Delhaize, a major grocery group, also disconnected some systems in response to a related security issue ^{[5][16][25][26][29]}.
• Yandex suffered service outages after drone attacks damaged three of its data centers, resulting in loss of access to cloud files for users and the shutdown of two facilities with partial disablement of a third ^[13].
• Ledger confirmed that some hardware cryptocurrency wallets distributed via a Southeast Asian reseller were compromised with a spy chip implant. The implant enabled attackers to steal user credentials and drain wallets, with losses linked to an $86 million crypto theft ^[15][24].

Newly Discovered Vulnerabilities