News that matters, without the noise.

Critical MariaDB Flaws Can Let Attackers Execute Code and Steal Database Data

MariaDB has disclosed security flaws that, under specific conditions, could let attackers run code, access restricted database tables,

GhostProfile macOS Malware Clones Browser Profiles to Hijack Live Sessions

A newly reported macOS malware called GhostProfile clones browser profiles and lets attackers control hidden copies of Chrome

Cyberattack Prompts Ahold Delhaize to Disconnect Systems

The company says it took some of its systems offline to contain a security issue within its network.

Fifth of CISOs Take Time Off to Avoid Patch Tuesday

Socura report claims CISOs are calling in sick or taking holiday to miss Patch Tuesday

Kimsuky Operation GitPower Uses GitHub to Deliver Malware and Steal Data

Kimsuky is using GitHub and other trusted code platforms to deliver malware, run commands, and steal data from

Refrigeration Controller Hack Spoils Food Across European Supermarkets

A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost. The post Refrigeration

Critical SonicWall Vulnerability Exploited in Attacks Following Disclosure

A critical SonicWall SMA1000 flaw, CVE-2026-102255 (CVSS 10.0), is being actively exploited days after disclosure, allowing unauthenticated attackers

Massive DDoS Attack Disrupts Ubuntu’s Canonical Websites and Security APIs

Canonical, the company behind Ubuntu Linux, suffered a sustained distributed denial-of-service attack on October 8, 2026, disrupting its

Yandex Data Center Outage Disrupts Access to Cloud Files Following Drone Attack

Yandex has confirmed a major service outage after drone attacks damaged three data centers in Russia, leaving some

LG webOS Flaws Let Remote Attackers Execute Commands as Root Without Authentication

Security researchers have disclosed four serious vulnerabilities in LG webOS smart TVs that could allow an attacker to

WordPress Plugin Vulnerability Exploited in Attacks to Upload and eEecute Arbitrary PHP code

Attackers are targeting a critical security flaw in the Bricksforge WordPress plugin that lets them upload and run

ISC Stormcast For Tuesday, October 13th, 2026 https://isc.sans.edu/podcastdetail/10134, (Tue, Oct 13th)