Top 5 Cybersecurity News

Sealed matte-grey device on a dark table under a narrow lamp, with the headline “What Does Your Assurance Verify?” and the DIESEC logo, for Top 5 Cybersecurity News, October 16, 2026

This week’s Top 5 Cybersecurity News for October 16, 2026 has one thing in common: each story turns on a check that looked like proof of safety. A VPN appliance was fully patched and the vendor’s integrity tool found nothing, yet an attacker held root. French supermarkets ran refrigeration controllers that sit outside most IT…

Read More

AhsayCBS Backup Server Vulnerability Exploited

AhsayCBS backup server vulnerability under attack: Huntress says version 10.3.4 is affected too. Restrict the console and hunt for web shells now.

An AhsayCBS backup server vulnerability is being exploited, and the version everyone was told to install did not fix it. Huntress saw attackers chain two flaws from October 7 to run code as SYSTEM on exposed Ahsay Cloud Backup Servers. On October 8 it found that 10.3.4, the release the public CVE entries call fixed,…

Read More

IDC Frontier Ransomware: One Cloud, 495 Customers

IDC Frontier ransomware attack on a Japanese cloud provider affecting 495 customers, October 2026

One ransomware attack on one cloud region has hit 495 companies and local governments in Japan at once. IDC Frontier, a SoftBank subsidiary, said its IDCF Cloud service was struck by ransomware on October 7 at 3:40 a.m. local time, forcing it to shut down the network and systems of its East Japan Region 1.…

Read More

Cyber Dependencies and Attack Surface: ENISA 2026

ENISA Threat Landscape 2026 and cyber dependencies expanding the attack surface

The ENISA Threat Landscape 2026, published on 22 September, has a message that gets less attention than the usual list of threats: organisations are increasingly exposed through their cyber dependencies, meaning the technologies, suppliers and services they rely on. For German businesses, that means cyber risk no longer sits only in internal networks and endpoints.…

Read More

SonicWall SMA1000 SSRF Vulnerability: Third Max Flaw

SonicWall SMA1000 SSRF vulnerability is the third max-severity flaw in three months. Attempts are reported; patch to 12.4.3-03670 or 12.5.0-03082.

A third maximum-severity flaw in three months has been fixed in SonicWall’s SMA1000 remote-access appliances, and this SonicWall SMA1000 SSRF vulnerability may already be under attack. SonicWall’s October advisory describes an unauthenticated server-side request forgery rated CVSS 10.0. A security firm says its honeypots saw exploitation attempts, while SonicWall says it has no evidence of…

Read More