Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
2026-10-06T19:23:21Z•bfd37aac83eac23655f353f1629d615cd5ffd0b7a052171dc8934e7b1746f4d7
CVE-2026-21589CVE-2026-61500AI-securityAtlassianBitbucketConfluenceDell-System-UpdateJiraMFA-theftRMM-securityRejetto-HFSSnowflakeactive-exploitationarbitrary-file-accesscredential-theftcritical-infrastructuredata-breachemail-compromisefinancial-sectorhealth-data-privacyphishingprivilege-escalationransomwareremote-code-executionvulnerability-managementzero-day
What happened
Security news digest covering active exploitation and disclosure of critical vulnerabilities, including Atlassian file-access flaws, Rejetto HFS remote code execution, and a Dell System Update privilege-escalation issue. It also reports major data breaches affecting ASOS, Denmark’s population registry, Nikkei, and financial institutions; phishing campaigns targeting advertising accounts and MFA; exploitation of zero-days at Pwn2Own; and security risks involving privileged RMM platforms and AI agents.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- bfd37aac83eac23655f353f1629d615cd5ffd0b7a052171dc8934e7b1746f4d7
- Enrichment time
- 2026-10-06T19:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.