This posting is here to collect cyber security news in October 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
This posting is here to collect cyber security news in October 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
505 Comments
Tomi Engdahl says:
Fesh WordPress Vulnerability in Attackers’ Crosshairs
Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.
https://www.securityweek.com/fresh-wordpress-vulnerability-in-attackers-crosshairs/
WordPress vulnerability exploited
Threat actors started exploiting a new high-severity WordPress vulnerability within hours of patches rolling out, Defiant warns.
Patched on October 28 in WordPress 7.1.4, the security defect impacts the WordPress update process and can be exploited for remote code execution.
According to Defiant, it is a race condition in WordPress’s Core update process that can be exploited without authentication. The attack complexity, however, is high. No CVE identifier has been assigned to the vulnerability yet.
Tomi Engdahl says:
Predict This!
Polymarket Just Can’t Stop Getting Hacked Over and Over Again
When will it stop?
https://futurism.com/future-society/polymarket-hacked-again?fbclid=IwdGRjcAVVSB9jbGNrBVVH6WV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEfsZJaolksxPvaj8VJKWDPbQP_5nkvTr2rGxa1pjNMYwQP46gMMoTnqVyu2dg_aem_qWeSBZ9zGiCWxCBahDIbDA
Polymarket’s soothsaying powers apparently didn’t foresee the platform getting hacked — again.
The controversial prediction market lost millions of dollars of its users’ money after hackers breached its defenses on the international version of its website on Thursday, forcing the company to temporarily suspend trading. According to the Wall Street Journal, some $2.6 million was stolen from around 700 traders.
Tomi Engdahl says:
Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.
https://www.securityweek.com/max-severity-gitlab-vulnerability-exploited-against-alpine-linux/
GitLab
A recent code execution vulnerability in GitLab was exploited one week after disclosure in a failed attack against Alpine Linux’s instance.
Tracked as CVE-2026-97229 (CVSS score of 10/10), the flaw stems from insufficient regular expression validation in Onigmo, Ruby’s regular expression engine.
The bug “could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration,” GitLab noted in an October 12 advisory.
According to Alpine Linux, a threat actor targeted its GitLab instance with a CVE-2026-97229 exploit on October 20 and 21. The attack failed, but the Linux distribution rebuilt the instance from scratch.
“Our checks show that the aports repository, packages, and the October 21 releases were not tampered with,” Alpine Linux notes.
It is still testing the GitLab instance before public release, and has reset all passwords, warning of observed automated login attempts using passwords compromised in other leaks.
Tomi Engdahl says:
Vesipumput tekstailivat toisilleen yli 2,2 miljoonaa tekstiviestiä – Lasku yli 100 000 euroa
Saku Arjanmaa30.10.202618:12Sms
32 000 sivun laskuerittely vaati useita pahvilaatikoita.
https://www.tivi.fi/uutiset/a/779b2712-86ee-4f04-a365-04718b699524?ref=box%3A53d7&utm_source=rap.iltalehti.fi&utm_medium=almainternal&utm_campaign=kiintea_talent_ohjausboksi
Ruotsalaisessa kunnassa tekstiviestejä toisilleen lähettäneet vesipumput aiheuttivat noin 1,4 miljoonan kruunun laskun. Kaksi pumppua lähetti toisilleen yli 2,2 miljoonaa tekstiviestiä kuukauden aikana.
Ongelma syntyi, kun paikallinen teleoperaattori ilmoitti sulkevansa pumput toiminnassa pitäneet 2G- ja 3G-verkot. Järvivesijärjestö joutui verkkojen sulkemisen myötä vaihtamaan operaattoria Telenoriin. Seuraavassa kuussa lähetetty lasku sai pumput omistaneen järjestön leuat loksahtamaan auki ja epäilemään, että jokin on vialla.
”Se oli absurdia. Olemme pieni järjestö, jolla ei ollut edes kymmenystä vaaditusta 1,4 miljoonasta kruunusta”, Slottsbrinkensin järvivesiyhdistyksen puheenjohtaja Ludvig af Klinteberg kertoo Dagens Nyheterille.
Kaksi pumpunhallintajärjestelmää oli lähettänyt toisilleen tekstiviestin joka sekunti kuukauden ajan pyytäen toista pumppua ottamaan ohjat. Järvivesiyhdistyksen pyytäessä selvitystä Telenorilta selvisi, että heidän rajattomassa tekstiviestipalvelussaan oli 15 000 viestin kuukausiraja ja ylimääräisistä viesteistä perittiin maksua.
Yhdistyksellä tai Telenorilla ei ollut Dagens Nyheterin kysyessä tarkkaa syytä sille, miten pumput päätyivät loppumattomaan tekstiviestikierteeseen. Järjestö on siirtynyt takaisin 2G-verkkoon, joka af Klintebergin mukaan ”toimii vielä ainakin vuoden”.
Tomi Engdahl says:
https://www.tomshardware.com/service-providers/samsungs-disastrous-firmware-update-breaks-refrigerators-ahead-of-south-korean-holiday-customers-complain-of-non-functioning-units-food-spoilage-ahead-of-three-day-celebration