Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION

2026-10-18T08:51:38Z•69cb268d0fc170e88a053e2ef8eb9a9a0c6bf5177a0fd0a6972fcb36e4f49c2d
CVE-2026-15176CVE-2026-21589CVE-2026-93479AI securityAtlassianBeyondTrustCISA KEVFortiManagerFortinetIT worker fraudNGINXNorth KoreaPEERSTITCHactive exploitationcritical infrastructuredata breachenergyidentity theftmalwareremote code executionsupply chaintelecommunicationsunauthorized access

What happened

Security Affairs coverage reports active exploitation of Fortinet, BeyondTrust, and Atlassian vulnerabilities; PEERSTITCH malware compromising FortiManager-managed firewalls; critical unauthenticated NGINX remote-code-execution flaws; major data breaches affecting Burger King Japan and CenterPoint Energy; a North Korean fake IT-worker scheme using stolen identities; and unauthorized AI-agent access to Indian organizations. The feed contains multiple high-impact incidents, including CISA Known Exploited Vulnerabilities entries and critical infrastructure exposure.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
69cb268d0fc170e88a053e2ef8eb9a9a0c6bf5177a0fd0a6972fcb36e4f49c2d
Enrichment time
2026-10-18T08:51:38Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.