Patchstack reported active exploitation of CVE-2026-85097 (CVSS 10.0) in the Bricksforge WordPress plugin, which lets unauthenticated attackers upload and execute arbitrary PHP code on vulnerable sites.
Attackers targeted CVE-2026-102255 (CVSS 10.0), a pre-authentication server-side request forgery in SonicWall Secure Mobile Access 1000 appliances, with 135 exploitation attempts within days of its public disclosure.
ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto Networks VPN vulnerability patched in May.
The CEO of Cooperative U confirmed that a cyber-attack affected food stock in several stores of major French supermarket chains from October 11.
Japanese karaoke giant Daiichi Kosho said a supply chain breach exposed the personal data of more than eight million customers.
Researchers detailed an AI-augmented initial access campaign attributed to CyberXero against WordPress sites, e-commerce platforms and critical infrastructure in Ukraine, which combines Cobalt Strike with an orchestration layer powered by Anthropic's Claude Code and stole more than 628,000 Ukrainian records.
Ledger paused sales through the reseller CryptoBilis after users in Southeast Asia reported stolen funds, with losses of more than $86, linked to devices bought there, and found an unauthorized hardware implant in one of the wallets.