Cybersecurity Weekly Intelligence Brief — week ending 2026-10-19
15 incidents disclosed · 375 stories reviewed · 18 critical · 5 newly exploited vulnerabilities
Summary
15 incidents were disclosed in the last seven days. The largest is Crunchbase, with 559,908 records affected. CISA added 5 flaws to its list of those used in attacks. On the compliance side, a Treasury Department rule takes effect on 5 November 2026.
Every item below links to its record. Times are UTC.
Top 5 incidents
- 1Crunchbase: a data breach
559,908 recordsHave I Been Pwned · 14 Oct
- 2Sharecare: a data breach
318,185 recordsHave I Been Pwned · 12 Oct
- 3Gîtes de France: a data breach
117,574 recordsHave I Been Pwned · 18 Oct
- 4Inner City Education Foundation: a data breach
California Attorney General · 16 Oct
- 5CDE: a data breach
California Attorney General · 16 Oct
Top 5 exploited vulnerabilities
- 1Cisco Asyncos9.8Critical
CVE-2026-76519· added 14 Oct
- 2AhsayCBS10.0Critical
CVE-2026-105134· added 14 Oct
- 3Fortinet Multiple Products6.0Medium
CVE-2025-61624· added 16 Oct
- 4AhsayCBS7.3High
CVE-2026-105133· added 14 Oct
- 5Paloaltonetworks Pan-Os7.2High
CVE-2026-0322· added 14 Oct
Compliance
Treasury Department · US
Technical details
For each item above: what happened, how an attacker reaches the flaw, the chance of attack, what CISA or the regulator says to do and by when, and the official record.
Fastnexa security experts
Which of these actually affect your company?
Send us what you run and a Fastnexa security expert will tell you which items in this briefing matter for you, and what to fix first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →