October 11, 2026
Why this day matters
- A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.
- U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND to its Known Exploited Vulnerabilities catalog. The U.S.
Enriched source records
Luna-generated claims retained by the evidence and claim-validation gates. Automated validation does not imply human review. A record does not need a CVE to be included.
Luna-enriched source article · the hacker newsP7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Researchers disclosed P7 DarkSword, a previously unseen variant of the DarkSword iOS exploit kit.
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Researchers disclosed P7 DarkSword, a previously unseen variant of the DarkSword iOS exploit kit.
Source published Oct 11, 2026, 4:24 AM UTC · Evidence retrieved Oct 11, 2026, 7:23 AM UTC
What happened
Researchers disclosed P7 DarkSword, a previously unseen variant of the DarkSword iOS exploit kit. [1]
iVerify reported that P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and supports two-way command-and-control communication with the attacker’s infrastructure. [2]
Cited source evidence
These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.
- [1]
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword.
- [2]
"Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communication with the attacker's infrastructure," iVerify said in a new report published Thursday.
Luna-enriched source article · helpnetsecurityWeek in review: FortiBleed is still active, Patch Tuesday forecast
An interview with Drew McCombs, Cylerity’s CTO and CISO, discusses questions hospital CISOs should ask healthcare fintech vendors and how he balances both roles.
Week in review: FortiBleed is still active, Patch Tuesday forecast
An interview with Drew McCombs, Cylerity’s CTO and CISO, discusses questions hospital CISOs should ask healthcare fintech vendors and how he balances both roles.
Source published Oct 11, 2026, 8:00 AM UTC · Evidence retrieved Oct 11, 2026, 8:51 AM UTC
What happened
An interview with Drew McCombs, Cylerity’s CTO and CISO, discusses questions hospital CISOs should ask healthcare fintech vendors and how he balances both roles. [1]
The interview states that security work is scheduled into every sprint, with issues involving patient data or funds disbursement prioritized. [2]
The interview covers how Cylerity keeps protected health information away from its bank partner. [3]
Known limitations
The supplied excerpt does not provide substantive details about FortiBleed activity or the Patch Tuesday forecast. [3]
Cited source evidence
These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.
- [1]
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO should ask a healthcare fintech vendor In this Help Net Security interview, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles.
- [2]
Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first.
- [3]
He covers how Cylerity keeps PHI away from its bank partner, why AI … More → The post Week in review: FortiBleed is still active, Patch Tuesday forecast appeared first on Help Net Security .
Additional source records
Material developmentsSecurity Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION
Securityaffairs published a source item for review.
Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION
Securityaffairs published a source item for review.
What happened
Securityaffairs published a source item for review.
Why it matters
A reviewed impact interpretation has not been published for this record.
Reviewed next steps
- Review the exact source item and determine whether it changes exposure or monitoring priorities.
Evidence
- Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION Securityaffairs · Published 2026-10-11T13:34:01Z · Retrieved Oct 11, 2026, 2:51 PM UTC
Known limitation
This item is supported by one source record and has not been independently corroborated here.
Threat and risk signalsU.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog
Securityaffairs published a source item for review.
U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog
Securityaffairs published a source item for review.
What happened
Securityaffairs published a source item for review.
Why it matters
A reviewed impact interpretation has not been published for this record.
Reviewed next steps
- Review the exact source item and determine whether it changes exposure or monitoring priorities.
Evidence
- U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog Securityaffairs · Published 2026-10-11T09:18:56Z · Retrieved Oct 11, 2026, 2:51 PM UTC
Known limitation
This item is supported by one source record and has not been independently corroborated here.