Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION
2026-10-18T08:51:38Z•69cb268d0fc170e88a053e2ef8eb9a9a0c6bf5177a0fd0a6972fcb36e4f49c2d
CVE-2026-15176CVE-2026-21589CVE-2026-93479AI securityAtlassianBeyondTrustCISA KEVFortiManagerFortinetIT worker fraudNGINXNorth KoreaPEERSTITCHactive exploitationcritical infrastructuredata breachenergyidentity theftmalwareremote code executionsupply chaintelecommunicationsunauthorized access
What happened
Security Affairs coverage reports active exploitation of Fortinet, BeyondTrust, and Atlassian vulnerabilities; PEERSTITCH malware compromising FortiManager-managed firewalls; critical unauthenticated NGINX remote-code-execution flaws; major data breaches affecting Burger King Japan and CenterPoint Energy; a North Korean fake IT-worker scheme using stolen identities; and unauthorized AI-agent access to Indian organizations. The feed contains multiple high-impact incidents, including CISA Known Exploited Vulnerabilities entries and critical infrastructure exposure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 69cb268d0fc170e88a053e2ef8eb9a9a0c6bf5177a0fd0a6972fcb36e4f49c2d
- Enrichment time
- 2026-10-18T08:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.