Japan’s GMO Internet Urges Customers to Disconnect PCs

A roundup of cybersecurity news from October 19–28, 2026, covering ransomware incidents, large-scale data breaches, supply-chain compromises, phishing-as-a-service, token theft, exploited vulnerabilities, AI-enabled attacks, and critical infrastructure threats. Notable items include SafePay reportedly compromising 600 critical-infrastructure victims, active exploitation of critical PHP flaws, attacks against Microsoft 365 and ConnectWise tenants, and widespread theft of personal and healthcare data. The document contains both confirmed incidents and advisories, with several threats described;