Archive of October 2026

GMO Internet Hit by Major Hack Threatening 26,739 Trading Servers as CEO Urges Invocation of Japan’s Active Cyber Defense Law

Japanese internet and financial services giant GMO Internet Group has fallen victim to a sophisticated cyberattack targeting its Desktop Cloud service, operated under the popular Onamae.com brand. The security breach has placed up to 26,739 virtual private servers—frequently utilized by retail…

ConnectWise Cloud Backup Breach Compromises Hundreds of Microsoft 365 Tenants in Sophisticated Supply-Chain Attack

A major security breach involving ConnectWise Cloud Backup (formerly known as SkyKick) has exposed hundreds of Microsoft 365 tenant environments to unauthorized access. The incident unfolded when attackers successfully compromised administrative application credentials belonging to the backup…

Widespread Memory-Corruption Flaw in Google’s Brotli Decoder Threatens Node.js, Bun, Python, and .NET Ecosystems

A critical memory-corruption vulnerability residing deep within Google’s Brotli compression library has sent shockwaves through the global software development community. Tracked as CVE-2026-111497 and carrying a critical CVSS score of 9.2, the flaw affects any software package or language runtime…

PHP2Shell: Critical PHP vulnerabilities patched, update now!

The PHP development team has issued an advisory warning of yet another potential Remote Code Execution (RCE) risk, designated as CVE-2026-115560. This new warning follows closely on the heels of emergency patches released just two days prior to address the critical "PHP2Shell" security…

The Netherlands shares cyber attack data directly in OASIS standard

Since October 1, 2026 The Netherlands has taken a major stride in reinforcing its national digital security by officially joining the international standards organization OASIS. Spearheaded by the National Cyber Security Centre (NCSC) in The Hague, this strategic membership marks a critical shift…