События

Russian fishing vessels are suspected of spying on critical undersea communication cables linking Britain with Europe and the US. Over 500 suspicious movements involving 17 vessels have been identified, with ships repeatedly slowing down, changing direction and following cable routes. British officials fear this activity could help Moscow identify targets for future sabotage

Oracle published a security alert for Java today: CVE-2026-91403, CVSS 9.1. It's in JSSE (Java's TLS) and is exploitable over the network without credentials. Affected versions listed: Java SE 8u511, 11.0.33, 17.0.21, 21.0.13, 25.0.5 and 27.0.1, and GraalVM

CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases. CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers

Microsoft: The China state-aligned threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Microsoft Threat Intelligence assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multitenant application. Our investigation found that Storm-0940's use of ARTEX accelerated the speed of compromised application abuse to authenticate to target environments through applications that had already been granted access, allowing the threat actor to operate without requiring an interactive user sign-in. AI-accelerated follow-on activity included reconnaissance, application credential changes, and attempts to modify privileges that could enable expanded or persistent access. Read our blog for a detailed analysis and indicators of compromise (IOCs), along with Microsoft Defender detections, protection recommendations, and guidance on investigating service principal sign-ins and unexpected application credential or privilege changes

Confirmed: Network data show an ongoing disruption to North Korea's already limited internet connectivity. The incident corresponds with the loss of international access to websites under the country's .kp domain

NSA Cyber: Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance

Orange Network Outage: A national outage is affecting Orange and Sosh mobile and internet networks since late morning this Wednesday, October 21. Emergency numbers may be difficult to reach, particularly 15 (SAMU), 17 (police and gendarmerie), and 18 (firefighters). In case of emergency, if your call does not go through, dial 112 from another available mobile network or use a landline

Security firm Calif appears to have a working exploit for the leaked PHP flaws, hours before the patch. A briefly posted video credited to Calif shows it running commands on a WordPress 7.1.3 site on PHP 8.5.4. Kevin Beaumont says a screenshot from it is real. A separate public PoC is also circulating, but its own author now says one of its attack chains is dead and code execution is unreliable. Admins have two stopgaps until the fix lands at 14:00 UTC today. Turning off session.upload_progress.enabled in php.ini disables the feature the leaked details point to. The only cost is upload progress bars. Blocking every request with a multipart Content-Type at the web server goes further, but breaks file uploads

The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated

Widespread internet disruption reported across North Korea. More than 40 websites, including KCNA, Rodong Sinmun and government portals, have experienced significant outages. Network monitors also detected disruptions to Pyongyang's internet infrastructure

The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence

Multiple online services are down or experiencing issues. Google Cloud has reported "issues" in its western Europe region, affecting dozens of websites, including Revolut, Royal Mail and HSBC

Google Cloud has reported an "issue" affecting dozens of services across the UK They include Revolut, Lloyds, HSBC, Halifax, Rightmove, Royal Mail, Bank of Scotland, DPD and Sky

Вопрос: Кто отдал приказ о прекращении работы Starlink в Украине Трамп: Я не знаю, кто это был, но хотел бы это выяснить.

One week before Serbia's crucial elections, it's confirmed: Belgrade University's rector was hacked with zero-click Pegasus — and a key prosecutor, pulled off a case after speaking out about political interference, got a spyware alert. 16 confirmed targets and counting

Дата-центр компании «Датагруп» в Киеве полностью уничтожен. Его восстановление и дальнейшая эксплуатация невозможны, сообщила пресс-служба компании.

Prime Minister Benjamin Netanyahu told Jerusalem_Post that Russia's cooperation with Iran runs counter to its own interests, accusing Moscow of backing antisemitic bot networks targeting Israel

Подтверждено: Российская социальная сеть VK (ВКонтакте) в настоящее время испытывает серьезные сбои, показатели доступности составляют всего 56% от нормального уровня. Инцидент произошел на фоне сообщений об атаке украинского беспилотника вблизи ее дата-центра в Санкт-Петербурге.

Italian airspace experiencing significant disruption today following a "technical anomaly" detected in the geographic data transmission network, according to the country's air traffic control operator ENAV. Operational capacity reduced to 50% of total air traffic, causing delays and cancellations, which will inevitably have a knock-on effect for the entire continent. ENAV has ruled out malicious activity as the cause.

Google announces major breakthrough in quantum computing, achieving 99.99% accuracy in key quantum operation

Болгарский депутат Ивайло Мирчев заявил, что двое неизвестных в масках умышленно подожгли 11 из 17 антенн Starlink на секретном объекте недалеко от Софии. Сообщается, что эти антенны обеспечивают спутниковую связь, используемую в военных действиях Украины. Болгарские власти подтвердили, что ведется расследование, и заявили об усилении мер безопасности на подобных объектах.

Initial: Explosion at Intel factory in Kiryat Gat, reports of 3 injured on site

Источники в Минобороны Украины подтвердили Суспільному, что ночью в украинской армии выявили ограничения работы Starlink на скоростях выше 160 км/ч. Точный порог скорости в ведомстве еще проверяют. Ограничения значительно осложняют некоторые операции Сил обороны, включая логистику, работу беспилотных систем и удары средней дальности. Причины ограничений выясняются.

В Балаково были зафиксированы взрывы.

Сервисы Яндекса не демонстрируют признаков восстановления на фоне продолжительного сбоя связи, который, по сообщениям, может указывать на серьезные повреждения инфраструктуры после ударов украинских беспилотников по ключевым дата-центрам в Сасово и Владимире. Российский технологический гигант представил пессимистичный прогноз для пользователей в России и за рубежом.

С 7 октября беспилотники поразили уже третий дата-центр Яндекса. После удара по объекту в Сасово трафик Яндекса (AS13238) уже сократился примерно на 35%, а около 00:30 UTC 11 октября упал на 99% по сравнению с предыдущей неделей, когда, по данным компании, прекратил работу ее дата-центр во Владимире.

A cyberattack targeting refrigeration systems at French supermarkets, including Intermarché, Leclerc and Super U, reportedly caused widespread food losses on October 12. Hackers allegedly exploited older software from Danish manufacturer Danfoss to remotely activate continuous defrosting, setting temperatures as high as 50°C and destroying fresh and frozen products. Around 150 Intermarché stores were reportedly affected, alongside Leclerc, Super U and potentially other retailers. Two supermarkets in Alsace reported combined losses of €270,000, while nationwide damage could reach several million euros

Multiple users report internet access has been throttled in Azerbaijan. Main apps appear to be Instagram, TikTok and other social media where you can share videos

Пользователи в России сообщают о сбоях в работе сервисов «Яндекса», свидетельствуют данные платформы мониторинга сбоев Detector404.

Подтверждено: данные показывают второй сбой в сетях российского технологического гиганта Яндекс после новой атаки украинского беспилотника на центры обработки данных во Владимире сегодня утром. Эта кампания началась вскоре после угрозы России устроить Украине цифровую детоксикацию.