Cybersecurity briefing, 2026-10-17

Here is the day’s security briefing.

• CISA puts BeyondTrust zero-day on the clock
• GitLab CI/CD regex bug opens self-managed servers
• FortiManager compromise exposed managed firewalls
• Candiru rides targeted ads past user clicks
• Danfoss exposure shrinks, but legacy controllers remain
• Booz Allen test shows AI can outrun OT defenses
• PwnEscape breaks Linux VM isolation at the host layer
• Microsoft expands Yam Store takedown across cloud accounts
• Bank of America turns an AI scan into a remediation bill
• Adobe Commerce flaw lets attackers run PHP code
• Wazuh Manager config check gap reaches root
• NGINX patches five config-gated flaws
• BAE Systems outage halts bankruptcy notices nationwide
• OpenBSD root chain turns a reliability fix into LPE
• IBM Guardium patch closes parser-facing attack paths

Recent editions

• Friday, October 16, 2026: CISA puts BeyondTrust zero-day on the clock · 20 stories
• Thursday, October 15, 2026: UAT-6275 mixes lures with public exploits · 17 stories
• Wednesday, October 14, 2026: UAT-6275 mixes lures with public exploits · 17 stories
• Tuesday, October 13, 2026: Danfoss exposure shrinks, but legacy controllers remain · 17 stories
• Monday, October 12, 2026: Bricksforge upload flaw turns form files into PHP · 14 stories
• Sunday, October 11, 2026: FBIjobs probe names a ransomware-response executive · 2 stories
• Saturday, October 10, 2026: FBIjobs probe names a ransomware-response executive · 16 stories