Cybersecurity briefing, 2026-10-20

Rank Math PRO is the lead story.

• Rank Math PRO backdoor outlives the plugin
• Siemens Software Center flaw hides behind signed launcher
• Plex exploit chain drops miners and proxy software
• Pegasus targeting reaches Serbian rector and suspected prosecutor
• CISA puts BeyondTrust zero-day on the clock
• ConnectWise app access confirmed across 162 Microsoft 365 tenants
• Fortinet and NetScaler intrusions leave trust exposed
• AdFection routes spyware through ordinary ad impressions
• UNC7017 turned AOMEI Backupper updates into malware delivery
• GhostAction shifts from blocked workflows to GitHub account theft
• ShinyHunters links put negotiator independence in question
• Apex npm tools pair malware with AI traffic hijacking
• F5 patches three NGINX flaws enabling code execution
• Atlassian file-read flaw moves past federal deadline
• DHS ban reaches DeepSeek hidden in agency AI gateways

Recent editions

• Monday, October 19, 2026: CISA puts BeyondTrust zero-day on the clock · 19 stories
• Sunday, October 18, 2026: PwnEscape breaks Linux VM isolation at the host layer · 1 story
• Saturday, October 17, 2026: CISA puts BeyondTrust zero-day on the clock · 12 stories
• Friday, October 16, 2026: Cisco Secure Email Gateway flaw can spread in clusters · 19 stories
• Thursday, October 15, 2026: UAT-6275 mixes lures with public exploits · 17 stories
• Wednesday, October 14, 2026: Danfoss controllers turned refrigeration into a remote switch · 17 stories
• Tuesday, October 13, 2026: Bricksforge upload flaw turns form files into PHP · 16 stories