Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Quest Diagnostics told the SEC it learned on October 21, 2026 of unauthorized access to its Quanum LSM system, which clients use to place test orders and look up results, and believes an unauthorized party accessed certain patient records .
According to ITmedia, Capcom announced on October 22 that its CAPCOM ID membership service suffered unauthorized access that leaked 11,774,247 records worldwide, after it found traces on the 19th and blocked the source .
According to iThome, emerging stock eco-friendly detergent maker Sea Mild Biotech (7516) issued a cybersecurity material announcement explaining that it received consumer reports of suspected personal data leakage, where third parties allegedly obtained data improperly from a platform managed by an outsourced vendor and contacted consumers via email .
According to iThome, on October 21, Gourmet Master Co.
According to an iThome report on October 22, 2026, Kemao Biotechnology (科懋生技) stated that an external-facing system operated by its outsourced e-commerce platform vendor suffered an automated attack in which the order database was scraped .
According to an October 22 report by iThome, Shin Kong Mitsukoshi stated that internal security monitoring detected IT system anomalies indicative of suspected unauthorized external intrusion; preliminary checks showed that the names, addresses, and contact phone numbers of some home delivery order customers—reportedly around 20,000 customers—were affected .
On October 22, TWCERT/CC published TVN-202610006: New Type Information Co.
CISA, the FBI, the US Secret Service and international partners released a joint advisory warning that SafePay is one of the most active ransomware groups of 2026, impacting about 600 victims across the Americas, Europe and Australia .
Railway said the attack ran from October 20 to 22 and aimed to obtain AI provider API keys for distillation attacks, interrupting builds and deployments .
GMO Internet said that on October 20 it confirmed a third party had planted a malicious program on some customer servers of its Onamae.
LiteLLM said its release pipeline was compromised early on October 21 and pushed v1.
According to iThome, at 9:00 a.
On October 22, the Administration for Cyber Security (ACS), MODA urged public and private sectors to accelerate patching: Node.
On October 21, Gourmet Master Co.
Trustbank said on 20 October that third-party unauthorized access to member data in its Furusato Choice service had leaked donors’ personal information .
Oliver's Travels said it discovered on October 20, 2026 that an unauthorized third party had accessed some of its systems, including its booking system, with the incident believed to have begun on October 19 .
According to iThome, on October 19, apparel company Munsin Enterprise (2916) issued a material announcement on the Market Observation Post System (MOPS), stating that it recently received consumer reports of suspected personal data leakage resulting from an automated attack on a database provided by its outsourced service platform vendor, in which partial information was unlawfully scraped .
According to reports by the United Daily News and China Times, a written operational report submitted by the National Security Bureau (NSB) to the Legislative Yuan on October 20 stated that through September, Taiwan's Government Service Network (GSN) experienced an average of over 2.
On October 20, TWCERT/CC published TVN-202610007: Asia Xuan Information's BA-Workflow contains three SQL injection vulnerabilities, each with a CVSS v4.
On October 20, TWCERT/CC published TVN-202610005: Kaifa Technology's WebITR contains an insecure deserialization vulnerability (CVSS v4.