Cybersecurity briefing, 2026-10-16

Targeted advertising just became a zero-click exploit channel.

• Cisco Secure Email Gateway flaw can spread in clusters
• Silent Lynx turns WinRAR into startup persistence
• Langflow flaw lets any account run server commands
• Unit 42 finds AI-written espionage on Linux hosts
• Ivanti ICS chain reaches root on patched appliances
• Adtech routes spyware onto managed phones
• Refrigeration controller attack widens across French supermarkets
• BeyondTrust appliance bug turned support into a foothold
• PwnEscape breaks Linux VM isolation at the host layer
• Danfoss exposure shrinks, but legacy controllers remain
• Juniper Junos advisory ties bugs to routing control
• SPIP odt2spip lets redacteurs reach code execution
• Collabora built-in CODE flaw plants web shells
• Qilin and Settra turn Palo Alto VPN into access path
• Xoscar deserialization flaw opens Xinference clusters
• Hirudo swaps bank apps for patched copies
• Atlassian file read flaw hits internet-facing servers

Recent editions

• Thursday, October 15, 2026: UAT-6275 mixes lures with public exploits · 17 stories
• Wednesday, October 14, 2026: UAT-6275 mixes lures with public exploits · 17 stories
• Tuesday, October 13, 2026: Danfoss exposure shrinks, but legacy controllers remain · 17 stories
• Monday, October 12, 2026: Bricksforge upload flaw turns form files into PHP · 14 stories
• Sunday, October 11, 2026: FBIjobs probe names a ransomware-response executive · 2 stories
• Saturday, October 10, 2026: FBIjobs probe names a ransomware-response executive · 16 stories
• Friday, October 9, 2026: Fortinet FortiMail path traversal is actively exploited · 18 stories