Cybersecurity briefing, 2026-10-19

Here's a line for your morning: the attacker never needed a password.

• BeyondTrust Remote Support zero-day hit hosted and self-hosted systems
• GitLab CI/CD regex bug opens self-managed servers
• FortiManager compromise exposed managed firewalls
• ConnectWise backup credential opened 173 Microsoft 365 tenants
• BAE Systems outage halts bankruptcy notices nationwide
• OpenBSD root chain turns a reliability fix into LPE
• Danfoss controllers turned refrigeration into a remote switch
• FBI arrest exposes the ransomware negotiator blind spot
• Microsoft expands Yam Store takedown across cloud accounts
• PwnEscape breaks Linux VM isolation at the host layer
• Backdoored open-weight models exfiltrate secrets
• Drupal Field UI flaw can reopen through modules
• Semperis survey flags ransomware threats beyond data theft
• Adobe Commerce flaw lets attackers run PHP code
• Bank of America turns an AI scan into a remediation bill
• Wazuh Manager config check gap reaches root
• IBM Guardium patch closes parser-facing attack paths

Recent editions

• Sunday, October 18, 2026: PwnEscape breaks Linux VM isolation at the host layer · 1 story
• Saturday, October 17, 2026: CISA puts BeyondTrust zero-day on the clock · 12 stories
• Friday, October 16, 2026: Cisco Secure Email Gateway flaw can spread in clusters · 19 stories
• Thursday, October 15, 2026: UAT-6275 mixes lures with public exploits · 17 stories
• Wednesday, October 14, 2026: Danfoss controllers turned refrigeration into a remote switch · 17 stories
• Tuesday, October 13, 2026: Bricksforge upload flaw turns form files into PHP · 16 stories
• Monday, October 12, 2026: Qilin and Settra turn Palo Alto VPN into access path · 15 stories