Cybersecurity

• Zeabur shuts after hack of 321,810 accounts

  A hacker read 321,810 accounts and more than 3.2 million stored settings at Zeabur, an app hosting company, it said on the 19th of October 2026. Zeabur will stop all servers by the 31st of December.

• Web flaw crashes 7 in 10 servers, FoxIO says

  One connection can crash 7 of the 10 HTTP/3 web programs FoxIO tested, the security firm said on the 20th of October 2026. Fixes are out for 4 of the 7.

• 333 Tor relays stole server passwords

  Attackers used 333 hacked Tor relays to steal server passwords from the 1st to the 5th of October 2026, The Hacker News reported. The Tor Project removed them and told volunteers to check their machines.

• GMO Onamae hacked: 26,739 servers shut

  GMO Internet said on the 21st of October 2026 that an attacker put harmful programs on its Onamae.com Desktop Cloud, where up to 26,739 servers may be affected. Every current user gets 5,000 yen, about 33 dollars, and the old service will not return.

• INTERPOL: 1,462 arrests in Africa cyber sweep

  INTERPOL said on the 22nd of October 2026 that police in 21 countries arrested 1,462 cybercrime suspects this summer. They recovered over 105 million dollars, against more than 385 million in losses.

• PingCAP's TiDB Cloud breached for 28 days

  PingCAP said on the 19th of October 2026 that an attacker with stolen credentials copied TiDB Cloud account, SQL editor and billing records. Customers are asked to rotate API keys.

• Plex2Shell: 4 Plex flaws now exploited

  Plex wrote on the 19th of October 2026 that four chained flaws in its Plex Media Server are under wide attack. Builds before 1.43.3.10861 are open, and Censys counted about 97,000 such servers by our arithmetic.

• Arista VeloCloud zero-day rated 9.9 exploited

  Arista Networks said on the 22nd of October 2026 that attackers exploit a SQL injection in its VeloCloud Orchestrator, rated 9.9 of 10. Any logged-in user can become superuser; on-premises owners should update to 5.2.3.18, 6.1.3.10 or 6.4.2.12.

• Palo Alto VPN flaw: 2 ransomware gangs inside

  Palo Alto Networks' Unit 42 wrote on the 19th of October 2026 that the Qilin and INC ransomware groups enter networks through CVE-2026-0257 in GlobalProtect VPN. Fixes have existed since the 13th of May.

• Node.js fixes 10 flaws, one a 9.2 Brotli RCE

  The Node.js project released 26.12.1, 24.22.1 and 22.23.4 on the 21st of October 2026 with 10 security fixes. One Brotli flaw can let an attacker run code, so servers on these lines should update now.

• eMudhra key was the number 4: 8 certs blocked

  Browsers began blocking eight certificates of the Indian certificate authority eMudhra on the 17th of October 2026, after their secret keys turned out to be tiny numbers. Browsers are covered; servers, phones and tools with their own root lists need updates.