Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
According to Security NEXT, SonicWall disclosed two vulnerabilities in Global Management System (GMS) on November 3, 2026, but will not provide patches because the product has reached end of support .
Acronis TRU disclosed on Nov 4 an attack framework called BOSSAI that combined 12 AI agents, targeted organizations in 11 countries over 12 observed days, and was assessed to be run by an individual in Hualien City, Taiwan .
French cooperative banking group Crédit Mutuel Arkéa announced on November 4, 2026, that it had suffered a cyberattack enabling attackers to execute fraudulent transactions, prompting the bank to suspend certain operations to prevent further fraudulent fund movements .
According to Security NEXT, a use-after-free vulnerability (CVE-2026-98432) exists in IPv4 TCP connection handling in the Linux kernel .
According to Security NEXT, istyle confirmed on October 28, 2026, that @cosme suffered an intrusion exposing data for some shared-ID members .
According to Security NEXT, Club Tourism detected third-party access to its servers on October 30, 2026; subsequent investigation confirmed the intrusion vector and method, indicating that some personal data may have been exfiltrated .
Following Google's disclosure of the XCPE botnet, cybersecurity vendor TrendAI published observations from June 3 to October 1 showing approximately 1.
According to fuitededonnées.
ESET researchers exposed a Russia-aligned threat actor they named Gorbag, active since at least February 2025 and focused exclusively on Ukrainian targets, especially law enforcement and justice entities, local administrations near the front line, the defense sector and a major transportation hub for foreign military aid .
According to Al Jazeera, an Egyptian digital advertising operator confirmed that one of its billboards was subjected to unauthorized control and immediately halted playback .
BleepingComputer reports that Russian cloud and hosting provider Beget said an attacker gained access to the management systems of its entire architecture on the night of Nov 1 and deployed malware that erased server data, after which Beget disconnected all servers .
Bank SinoPac experienced unauthorized customer account transfers on November 3 and held a press conference on November 4 confirming that external hackers had exploited a security configuration flaw in a new online banking transaction system provided by a third-party vendor .
According to RTHK, Hong Kong's privacy commissioner received breach notifications from several airlines and electrical retailers and opened investigations, logging 51 complaints and 48 enquiries as of October 30 with losses from about HK$10,000 to over HK$1.
According to iThome, on October 30, hygiene products manufacturer Kang Na Hsiung Enterprise (KNH, 9919) issued a material announcement on the Market Observation Post System (MOPS), stating that the database of 91APP, the outsourced vendor for its online service platform, suffered an automated attack resulting in unauthorized access to partial data, including order records from KNH's online store .
According to iThome, on October 30, cable TV and broadband provider Taiwan Optical Platform (TOP) issued a cybersecurity material announcement disclosing that files on certain information systems of the company and its subsidiaries were encrypted, affecting internal system operations; on the same day, TOP's TPEx-listed subsidiary Shin Chuan International Multimedia Technology (6856) issued a similar material announcement stating that information systems of the company and its subsidiaries suffered a cyberattack in which some files could not be decrypted .
According to Security NEXT, Japan's Ministry of Foreign Affairs (MOFA) detected an intrusion on an externally connected network on July 27, 2026, and subsequently blocked access and disabled authentication credentials .
According to Security NEXT, the Good Smile Company Official Shop shut down on October 23, 2026 after being notified by its maintenance vendor, with logs showing multiple accesses to administrative information between October 19 and October 22 .
Fortinet FortiGuard Labs published research on Nov 2 saying it has tracked, over several months, a campaign targeting South Asian organizations that uses PowerShell scripts and a custom remote access trojan it calls PapRAT for persistent access, attributing it to BITTER with high confidence .
Certificate authority DigiCert filed an incident report on Mozilla Bugzilla explaining that following an infrastructure migration in February 2025, an internal business system unintentionally became externally accessible, allowing an attacker to create unauthorized accounts and read certain archived customer data .
South Korean financial outlet Money Today said it confirmed a personal data leak from illegal external access on September 25, 2026, and a follow-up check on October 27 found 1,367 records leaked .