Cybersecurity Weekly Intelligence Brief — week ending 2026-10-12
6 incidents disclosed · 324 stories reviewed · 7 critical · 5 newly exploited vulnerabilities
Summary
6 incidents were disclosed in the last seven days. The largest is Angel One, with 6,765,054 records affected. CISA added 5 flaws to its list of those used in attacks. On the compliance side, a Treasury Department rule takes effect on 5 November 2026.
Every item below links to its record. Times are UTC.
Top 5 incidents
- 1Angel One: a data breach
6,765,054 recordsHave I Been Pwned · 7 Oct
- 2Neogen: a data breach
435,963 recordsHave I Been Pwned · 9 Oct
- 3CyrusOne: a data breach
373,460 recordsHave I Been Pwned · 7 Oct
- 4Double Counter: a data breach
274,922 recordsHave I Been Pwned · 7 Oct
- 5Alisal Union Schol District: a data breach
California Attorney General · 7 Oct
Top 5 exploited vulnerabilities
- 1Fedoraproject Fedora10.0Critical
CVE-2015-3306· added 8 Oct
- 2Onlyoffice Document Server9.8Critical
CVE-2021-3199· added 8 Oct
- 3Huawei Agile Controller-Campus Firmware8.1High
CVE-2016-3081· added 8 Oct
- 4Juniper Junos7.5High
CVE-2015-5477· added 8 Oct
- 5Strapi4.9Medium
CVE-2023-22894· added 8 Oct
Compliance
Treasury Department · US
Technical details
For each item above: what happened, how an attacker reaches the flaw, the chance of attack, what CISA or the regulator says to do and by when, and the official record.
Fastnexa security experts
Which of these actually affect your company?
Send us what you run and a Fastnexa security expert will tell you which items in this briefing matter for you, and what to fix first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →