Cybersecurity Weekly Intelligence Brief — week ending 2026-10-26
7 incidents disclosed · 385 stories reviewed · 9 critical · 5 newly exploited vulnerabilities
Summary
7 incidents were disclosed in the last seven days. The largest is Assurance Retraite, with 70,372 records affected. CISA added 5 flaws to its list of those used in attacks. On the compliance side, a Treasury Department rule takes effect on 5 November 2026.
Every item below links to its record. Times are UTC.
Top 5 incidents
- 1QUEST DIAGNOSTICS INC disclosed a cybersecurity incident
SEC EDGAR · 22 Oct
- 2Assurance Retraite: a data breach
70,372 recordsHave I Been Pwned · 20 Oct
- 3BASS Medical Group: a data breach
California Attorney General · 22 Oct
- 4Dill Dill Carr Stonbraker & Hutchings, P.C.: a data breach
California Attorney General · 22 Oct
- 5Deposition Solutions, LLC (d/b/a Lexitas): a data breach
California Attorney General · 22 Oct
Top 5 exploited vulnerabilities
- 1EG Secure Solutions SiteGuard Server Edition7.8High
CVE-2026-106931· added 20 Oct
- 2Plex Media Server7.2High
CVE-2026-96656· added 20 Oct
- 3Plex Media Server6.5Medium
CVE-2026-96654· added 20 Oct
- 4Plex Media Server4.3Medium
CVE-2026-96655· added 20 Oct
- 5Plex Media Server4.3Medium
CVE-2026-96652· added 20 Oct
Compliance
Treasury Department · US
Technical details
For each item above: what happened, how an attacker reaches the flaw, the chance of attack, what CISA or the regulator says to do and by when, and the official record.
Fastnexa security experts
Which of these actually affect your company?
Send us what you run and a Fastnexa security expert will tell you which items in this briefing matter for you, and what to fix first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →