Skip to content
left cover bg
circles

Security Daily.

Friday, October 16, 2026

Automatically Curated Security Digest

Collected

16 Articles

Across

2 Trusted Sources

Published

Last Updated 11:20 AM UTC

Coverage

BleepingComputer
CISA
Top Story

Thermo Fisher Torrent Suite Software

CISAHigh

Why it matters

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. The following versions of Thermo Fisher Torrent Suite Software are affected:…

Read Original

16

Articles

2

Sources

5

CVEs

6

Alerts

0

Research

3m

Read Time

Feed Status

CISA7
NIST NVD
BleepingComputer15
PortSwigger Research

Automated Security Digest — This page is an automatically curated cybersecurity digest generated from publicly available security feeds. All articles remain the property of their respective publishers. Click any item to read the original article.

Last generated: Oct 16, 2026, 11:20 AM

Security Alerts

6

Critical alerts and advisories from official agencies.

CISASecurity AlertsHigh

Thermo Fisher Torrent Suite Software

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. The following versions of Thermo Fisher Torrent Suite Software are affected: Torrent Suite Software <=5.18 (CVE-2026-107777) CVSS Vendor…

CVE-2026-107777
Read Original
CISASecurity Alerts

J4Care dcm4che

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition. The following…

Read Original
CISASecurity AlertsHigh

Guangzhou Juan IoT Technology EseeCloud

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The following versions of Guangzhou Juan IoT Technology EseeCloud are affected: EseeCloud App <=4.9.6 (CVE-2026-107617, CVE-2026-97858,…

CVE-2026-107617CVE-2026-97858
Read Original
CISASecurity AlertsHigh

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability This type of vulnerability is a…

CVE-2026-21589
Read Original
CISASecurity Alerts

Eclipse Foundation Eclipse Milo

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation…

Read Original
CISASecurity AlertsHigh

CISA Malcolm

View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334) Malcolm <=v26.08.0 (CVE-2026-107333, CVE-2026-107362) CVSS Vendor Equipment v3 8.1 CISA Malcolm 6…

CVE-2026-107336CVE-2026-107361CVE-2026-107337CVE-2026-107335CVE-2026-107334+2 more
Read Original

Cybersecurity News

10

Latest news from trusted cybersecurity publications.

BleepingComputerCybersecurity News

Microsoft: October Windows update may break Smart App Control

Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update. [...]

Read Original
BleepingComputerCybersecurity News

BAE Systems cyberattack disrupts US federal court operations

The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts. [...]

Read Original
BleepingComputerCybersecurity NewsCritical

BeyondTrust patches zero-day exploited in attacks since August

BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...]

Read Original
BleepingComputerCybersecurity NewsCritical

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]

CVE-2026-110447
Read Original
BleepingComputerCybersecurity News

Android gets AI defenses against messaging scams, fake calls

Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]

Read Original
BleepingComputerCybersecurity News

Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]

Read Original
BleepingComputerCybersecurity NewsHigh

Fake Arch Linux packages push malware with root privileges

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]

Read Original
BleepingComputerCybersecurity News

Is AI pentesting as good as a human pentester?

AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and weaknesses of both approaches and explains where AI agents can improve security…

Read Original
BleepingComputerCybersecurity News

Microsoft: Windows Server 2022 reached end of mainstream support

Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. [...]

Read Original
BleepingComputerCybersecurity NewsCritical

Police arrests 95 suspects in international CSAM crackdown action

Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups. [...]

Read Original

Share This Digest