BleepingComputer.com
"Drupal patches critical RCE flaws, warns exploits may emerge soon."
Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents. Accessed on 17 October 2026, 1449 UTC.
Content and Source: "BleepingComputer.com"
URL--https://www.bleepingcomputer.com/
Please check URL or scroll down to read your selections. Thanks for joining us today.
Russ Roberts (https://www.hawaiicybersecurityjournal.net).
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system.
- October 17, 2026
- 10:32 AM
0
This piano lesson app gives you live feedback, and it’s on sale for $79.99
Learning piano from free videos means nobody tells you when you hit a wrong note. flowkey actually listens while you play and tells you how to improve. Right now, a 5-year subscription is also on sale for $79.99 (reg. $899).
- October 17, 2026
- 08:12 AM
- 0
Get a free 30-day browser security assessment from Push Security
See what your other tools miss: phishing that bypasses email security and MFA, ClickFix lures, unsanctioned AI tools, sensitive data shared through uploads and pastes, risky and malicious extensions, breached passwords, accounts with weak or missing MFA, and more.
Deployed through your MDM in under an hour, with a custom report you keep.
Critical BlockStrap flaw lets hackers run code on Magento servers
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers.
- October 16, 2026
- 04:00 PM
- 0
Targeted ads installed Candiru spyware in zero-click attacks
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device.
- October 16, 2026
- 01:20 PM
- 0
Employees using personal ChatGPT at work? Here's what IT admins need to do
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can investigate unauthorized AI use and block sensitive information before it reaches personal accounts.
- October 16, 2026
- 09:50 AM
- 0
Burger King Japan data breach exposes 11 million customer records
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.
- October 16, 2026
- 08:01 AM
- 0
Block ads, trackers, and malicious domains for $59.99
Blocking ads, hiding traffic, and filtering malicious domains usually means three separate subscriptions from three companies, each renewing on its own schedule. The All-in-One AdGuard Bundle puts all three jobs under one account, and a 5-year subscription is on sale for $59.99 (reg. $488.75).
- October 16, 2026
- 07:09 AM
- 0
Microsoft: October Windows update may break Smart App Control
Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update.
- October 16, 2026
- 04:44 AM
- 0
BAE Systems cyberattack disrupts US federal court operations
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts.
- October 16, 2026
- 03:37 AM
- 0
BeyondTrust patches zero-day exploited in attacks since August
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.
- October 16, 2026
- 02:18 AM
- 0
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud.
- October 15, 2026
- 04:25 PM
- 0
Android gets AI defenses against messaging scams, fake calls
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices.
- October 15, 2026
- 03:48 PM
- 0
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network.
- October 15, 2026
- 02:20 PM
- 0
Fake Arch Linux packages push malware with root privileges
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.
- October 15, 2026
- 01:12 PM
- 1
Is AI pentesting as good as a human pentester?
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and weaknesses of both approaches and explains where AI agents can improve security testing.
- October 15, 2026
- 10:01 AM
- 0
Microsoft: Windows Server 2022 reached end of mainstream support
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031.
- October 15, 2026
- 09:18 AM
- 0
Police arrests 95 suspects in international CSAM crackdown action
Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups.
- October 15, 2026
- 07:55 AM
- 0
Get a year of QuickBooks Desktop Pro Plus 2024 for $299.99
Intuit QuickBooks Desktop Pro Plus 2024 for Windows brings invoicing, expenses, and reporting into one program, and a 1-year subscription is on sale for $299.99 (reg. $536).
- October 15, 2026
- 07:07 AM
- 0
Microsoft fixes bug causing Windows black screens, Explorer crashes
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August.
- October 15, 2026
- 05:10 AM
- 0
UK Legal Aid Agency: Hackers stole records dating back to 1978
The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978.
- October 15, 2026
- 04:06 AM
- 0
Comments
Post a Comment
Please leave a comment about our recent post.