Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

2026-10-06T19:23:21Z•bfd37aac83eac23655f353f1629d615cd5ffd0b7a052171dc8934e7b1746f4d7
CVE-2026-21589CVE-2026-61500AI-securityAtlassianBitbucketConfluenceDell-System-UpdateJiraMFA-theftRMM-securityRejetto-HFSSnowflakeactive-exploitationarbitrary-file-accesscredential-theftcritical-infrastructuredata-breachemail-compromisefinancial-sectorhealth-data-privacyphishingprivilege-escalationransomwareremote-code-executionvulnerability-managementzero-day

What happened

Security news digest covering active exploitation and disclosure of critical vulnerabilities, including Atlassian file-access flaws, Rejetto HFS remote code execution, and a Dell System Update privilege-escalation issue. It also reports major data breaches affecting ASOS, Denmark’s population registry, Nikkei, and financial institutions; phishing campaigns targeting advertising accounts and MFA; exploitation of zero-days at Pwn2Own; and security risks involving privileged RMM platforms and AI agents.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
bfd37aac83eac23655f353f1629d615cd5ffd0b7a052171dc8934e7b1746f4d7
Enrichment time
2026-10-06T19:23:21Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.