The eMudhra (emSign) CA has been compromised to issue fraudulent HTTPS certificates

https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/

https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2

I'm so confused that the largest info-op that TikTok disrupted in August targeted Haiti with Putin narratives

https://www.tiktok.com/safety/en/transparency/covert-influence-operations

Google Cloud outage takes down Revolut, Lloyds, and other banking apps

https://www.businessinsider.com/google-cloud-outage-revolut-halifax-emma-uk-london-2026-10

New Heartbreaker ransomware targets macOS users

https://objective-see.org/blog/blog_0x8A.html

Hackers have accessed the backend database of WordPress plugin developer TeamUpdraft, stole connection keys, and then deployed malicious plugins on their sites

https://teamupdraft.com/blog/security-incident-october-2026/

https://www.wordfence.com/blog/2026/10/updraftcentral-connection-key-compromise/

Crypto platform Qubic halted operations after hackers stole $1.4 million from 1,400 user accounts

Incident traced back to weak randomness on iOS and macOS wallets

https://blockonomi.com/qubic-halts-blockchain-after-1-4-million-hack-drains-1400-wallets/

A new study argues that Canada could develop its own national operating system to replace Microsoft's Windows and still save millions in the process

https://theconversation.com/canada-could-save-millions-by-developing-its-own-operating-system-instead-of-relying-on-microsoft-windows-294027

🎙️ Between Two Nerds: Why AI will mean infinite bugs

https://risky.biz/BTN186/

OVHCloud CLI repo compromised in a supply chain attack

https://www.thestack.technology/ovhcloud-cli-repo-compromised-customer-reports-incident/

Breaking, exclusive: Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.

From the story:

"KrebsOnSecurity has learned from two sources close to the ShinyHunters probe that FBI investigators believe at least one executive at a U.S.-based consulting firm played an active role in operating the now-defunct ShinyHunters victim extortion website “shinywire[.]com.” KrebsOnSecurity is not naming the U.S. company or the suspected executive(s) for now because they have not yet been charged with a crime, but it is a prestigious firm with more than 1,000 associates."

https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/

#shinyhunters #cybercrime #ransomware #fbi #shinywire

Palo Alto CEO wants AI labs out of the ‘fear-mongering business’

https://finance.yahoo.com/technology/ai/articles/palo-alto-ceo-wants-ai-161700466.html

Two Serbian opposition figures targeted with spyware, research group says

https://www.newsobserver.com/news/nation-world/world/article317680738.html

-PwnEscape vulnerability lets you escape KVM
-Supply chain incidents at AOMEI and ConnectWise
-Intel discontinues SGX
-US infosec job postings fell by 25%
-OpenCode abused for distillation attacks
-Cyberattack impacts US bankruptcy courts
-Cyberattack hits Romania's stock market agency
-Cali DoE breach impacts 7m California students
-Burger King Japan hack impacts 11.2m customers
-South Korea fires employee who sold patient data

N: https://news.risky.biz/risky-bulletin-pwnescape-vulnerability-lets-you-escape-kvm/
P: https://risky.biz/RBNEWS622/

-AI agents hacked Indian sites
-Ukrainian hacktivist deface school testing system
-Gamdom hacked for $4.2m
-Pirate Chain hacked for $10m
-Hackers breach VPS provider FirstVDS
-Edge rolls out silent security updates
-Meta admits it throttled Lula accounts
-Meta takes down No Kings account
-TikTok bans Musk documentary account
-GitHub expands malware advisories to eight services
-PyPI adds email reputation checking
-RubyGems adds package security warnings
-MEPs targeted by deepfake porn

-ARMORY CASTLE abuses BeyondTrust zero-day
-SiteGuard WAF bug abused in the wild
-Apache Airflow failed host key verifications
-TP-Link Tapo camera takeover bugs
-Big Fish vulnerability impacts all FreeBSD releases
-PostgreSQL RCE
-PhantomBuffer technique
-BalCCon 2026 videos
-Anthropic has acquired Opaque Systems
-Proofpoint buys Varonis

-Romania kept buying Kaspersky despite ban
-Server seizure scandal in the Netherlands
-Drone strikes hit VK data centers
-Arrested Qilin member linked to Synnovis hack
-Scammers return to scam centers after arrests in Timor-Leste
-SMS blaster squad arrested in Manila
-Yahoo Boys adopt AI tools
-Malware in Rank Math SEO WordPress plugin
-TAG-217 targets South Korean banks
-New malware: QuartzLine, HypeAgent, Romulus
-CL-UNK-1211 adopts AI tools

-AI agents hacked Indian sites
-Ukrainian hacktivist deface school testing system
-Gamdom hacked for $4.2m
-Pirate Chain hacked for $10m
-Hackers breach VPS provider FirstVDS
-Edge rolls out silent security updates
-Meta admits it throttled Lula accounts
-Meta takes down No Kings account
-TikTok bans Musk documentary account
-GitHub expands malware advisories to eight services
-PyPI adds email reputation checking
-RubyGems adds package security warnings
-MEPs targeted by deepfake porn

-PwnEscape vulnerability lets you escape KVM
-Supply chain incidents at AOMEI and ConnectWise
-Intel discontinues SGX
-US infosec job postings fell by 25%
-OpenCode abused for distillation attacks
-Cyberattack impacts US bankruptcy courts
-Cyberattack hits Romania's stock market agency
-Cali DoE breach impacts 7m California students
-Burger King Japan hack impacts 11.2m customers
-South Korea fires employee who sold patient data

N: https://news.risky.biz/risky-bulletin-pwnescape-vulnerability-lets-you-escape-kvm/
P: https://risky.biz/RBNEWS622/

GitHub has expanded its Malware Advisories database to cover eight package repositories.

Starting last week, the database also includes warnings for malicious packages on PyPI, Maven, RubyGems, NuGet, Go, Rust Crates, and PHP Composer... on top of npm

https://openssf.org/blog/2026/10/16/case-study-github-expands-malware-advisories-across-eight-ecosystems-with-openssf/