Black October in cybersecurity: list of 27 incidents published within 48 hours

Black October in cybersecurity: list of 27 incidents published within 48 hours
Black October in cybersecurity: list of 27 incidents published within 48 hours

The last 48 hours are being called one of the most serious periods in cybersecurity history. A list of 27 incidents is circulating in the public domain, including personal data leaks, software breaches, critical vulnerabilities, and attacks on corporate infrastructure. The authors of the review have named this period "Black October", although the scale and interconnection of all the cited cases require independent verification.

Vulnerabilities in tools and account breaches

Among the mentioned incidents are the PHP2Shell vulnerability and issues with eMudhra digital trust keys. The list also includes reports of stolen data from students in California state schools and account breaches on the Zeabur platform. Separately mentioned are the infection of the LiteLLM artificial intelligence tool with password-stealing software and a critical GitLab vulnerability.

Incidents on services with a large user base

A separate section concerns attacks on companies and services used by millions of people and developers. The authors of the review mention incidents related to NGINX, WordPress, Plex, Palo Alto, AOMEI, and the TiDB Cloud platform. Reports are also cited regarding possible medical data leaks in the US, specifically information on 970,000 Medi-Cal patients.

SafePay attacks and problems in the banking sector

Among other cases are FBI warnings about the SafePay ransomware, which, according to the data provided, attacked over 600 critical infrastructure organisations. The list also mentions the breach of Tor network relays, a data leak at State Bank of India, as well as attacks associated with Siemens and OVHcloud.

The role of artificial intelligence in vulnerability discovery

The authors pay particular attention to the use of artificial intelligence for vulnerability discovery. If previously detecting complex errors could require prolonged work by specialised teams, modern AI tools are capable of automating code analysis and accelerating the search for potential entry points. In the hands of malicious actors, this can shorten the time between the discovery of a vulnerability and an attempt to exploit it.

Fact verification is needed

At the same time, the list circulating online is not confirmation that all 27 incidents occurred specifically within the last 48 hours or have the same level of severity. Each case requires separate verification based on statements from companies, cybersecurity researchers, and relevant government bodies.

22 October 2026, 23:51 Views: 1415

Comments

No comments yet. Be the first!

Leave a comment

Links are not allowed in comments. The editors may remove comments without explanation.
Back to top ↑