Quest Diagnostics Quanum LSM Incident: System Restored, Patient Data Scope Still Under Investigation
Status (25 October 2026, 08:19 Cyprus time (UTC+2)): Monitoring. Quest Diagnostics says it has remediated the unauthorized access to its Quanum Lab Services Manager (LSM) system, and that LSM and the ...
Rakus Light Cloud, the Rakus subsidiary that runs the Japanese email newsletter service Blastmail (ブラストメール), says an outside third party broke into its systems and took data out. In its notice updated ...
Arista disclosed on 22 October 2026 that on-premises VeloCloud Orchestrator (VCO), the management portal for VeloCloud SD-WAN, has a SQL injection flaw, CVE-2026-114625, that it says is being ...
CVE-2026-110447 is an unauthenticated OS command injection in Collabora Online - Built-in CODE Server, an optional Nextcloud app with the package name richdocumentscode. Collabora's advisory says a ...
On 21 October 2026, the Node.js project released 22.23.4, 24.22.1 and 26.12.1 for all three supported release lines. The most serious fix is CVE-2026-111497, an out-of-bounds write in the Brotli ...
Update 22 Oct 2026, 03:02 Cyprus time (UTC+3): LiteLLM's incident report (last updated 20:30 UTC) now includes its account of the attack chain, in a new "How this happened" section, and OSV's ...
On 23 October 2026 the Ruby core team released Ruby 4.0.9, 3.4.12 and 3.3.13. The releases fix three bugs in Onigmo, the regular-expression engine built into Ruby. GitLab had found that these bugs ...
The private keys of eight intermediate certificate authority (CA) certificates operated by the Indian CA eMudhra (emSign brand) have been compromised. Mozilla and the Chrome Root Program confirmed the ...
Status (22 October 2026, 19:05 Cyprus time (UTC+3)): Monitoring. Bullhorn's status page shows "Partial System Outage". Bullhorn says it detected a cyber incident on the Bullhorn Platform on 17 October ...
Splunk published a security hardening release for Splunk Enterprise on 21 October 2026. Advisory SVD-2026-1008 covers "multiple internally identified vulnerabilities", grouped into four CVEs. Two of ...
1. Upgrade. Move every affected device to the fixed version for its branch, or later. Fortinet asks customers to start with internet-facing devices and suggested scheduling change windows for 22–23 ...
The breach at Nikkei Inc. was facilitated through the compromise of credentials granting access to a cloud service used for system development. According to the official disclosure and corroborating ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results