Nikkei discloses third data breach in a month, 1.8M records exposed
2026-10-20T01:23:22Z•63653f8c00a6fc1b7e6499f16fb749dbdf24cc30bad8e84461adc4c87776bf00
CVE-2026-103849AOMEIAPI key exposureAdobe CommerceCandiru spywareConnectWiseDrupalMagentoMicrosoft 365NGINXRank MathSiteGuardWordPressbackdoorcommand injectioncyberattackdata breachmalwarepatch managementremote code executionsupply-chain attackzero-click exploit
What happened
A BleepingComputer security feed covering significant October 2026 incidents and vulnerabilities, including supply-chain compromises affecting WordPress Rank Math PRO, AOMEI update infrastructure, and ConnectWise Cloud Backup; critical remote-code-execution flaws in NGINX, Drupal, SiteGuard, and Magento/Adobe Commerce; data breaches, exposed API keys, spyware delivered through zero-click advertising, and cyberattacks causing service outages.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 63653f8c00a6fc1b7e6499f16fb749dbdf24cc30bad8e84461adc4c87776bf00
- Enrichment time
- 2026-10-20T01:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.