Microsoft Outlook to block MSIX attachments starting November

2026-10-07T19:23:22Z•db947d9c2dc652e3c7af6458717d9cd799c42d670b7683345a2f1a1a8c58975e
CVE-2026-21589AI server compromiseAtlassianMFA theftMSIX attachmentsSSRFSonicWallWordPressactive exploitationbackup targetingcredential theftcryptominingdata breachemail compromisephishingransomwarestored XSSsupply chain

What happened

BleepingComputer security feed covering active exploitation of critical Atlassian file-access and SonicWall SSRF vulnerabilities, attacks against exposed AI servers, ransomware and data theft, WordPress plugin compromises, phishing campaigns, credential and MFA theft, and other security incidents. The most urgent items are the actively exploited Atlassian vulnerability CVE-2026-21589 and maximum-severity SonicWall SMA1000 SSRF flaw.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
db947d9c2dc652e3c7af6458717d9cd799c42d670b7683345a2f1a1a8c58975e
Enrichment time
2026-10-07T19:23:22Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.