Weekly briefing · 26 Oct – 2 Nov 2026
This week in cyber security
10 incidents were disclosed in the last seven days. The largest is AfD, with 345,439 records affected. CISA added 5 flaws to its list of those used in attacks. On the compliance side, a Treasury Department rule takes effect on 5 November 2026.
Top 5 incidents
- 1Revolve Group, Inc. disclosed a cybersecurity incident
SEC EDGAR · 30 Oct
- 2AfD: a data breach
345,439 recordsHave I Been Pwned · 27 Oct
- 3Bangkok Bank PCL - New York Branch: a data breach
California Attorney General · 29 Oct
- 4Del Monte Foods Corporation II Inc.: a data breach
California Attorney General · 29 Oct
- 5Troutman Pepper Locke LLP: a data breach
California Attorney General · 28 Oct
Top 5 exploited vulnerabilities
- 1GitLab Community Edition and Enterprise Edition10.0Critical
CVE-2026-97229· added 29 Oct
- 2Adobe Commerce and Magento9.3Critical
CVE-2026-48356· added 27 Oct
- 3Ivanti Connect Secure7.0High
CVE-2026-111357· added 30 Oct
- 4Linux Kernel7.8High
CVE-2026-46300· added 28 Oct
- 5Ivanti Connect SecureNot scored yet
CVE-2026-118527· added 30 Oct
Compliance
Privacy Act Exemptions
Treasury Department · US
Takes effect5 November 2026In 2 days