Cybersecurity Radar — 2026-10-14

🔴 Critical Alerts

• Actively exploited Windows zero-day in Microsoft’s record October update.
  Microsoft’s October 2026 Patch Tuesday addressed CVE-2026-96951, described by SecurityWeek as a Windows security-feature bypass flaw that has been exploited in the wild. SecurityWeek reported the release fixed 1,413 vulnerabilities, and CyberScoop said nearly four in five affect Windows.
  Who is affected: Windows systems.
  Severity: High, because the flaw is actively exploited.
  Recommended action: Deploy Microsoft’s October 2026 security updates immediately, prioritizing systems that could be exposed to CVE-2026-96951.

  

• FortiBleed credential-harvesting warning.
  The Hacker News reported that the FBI warned FortiBleed remains active after amassing 86,644 Fortinet device credentials.
  Who is affected: Fortinet devices and associated credentials.
  Severity: High, due to the reported scale of credential collection.
  Recommended action: Review Fortinet device logs for suspicious credential-collection activity and rotate potentially exposed credentials.

  

Threat Landscape

• French supermarket refrigeration attack.
  Time reported an “unprecedented” cyberattack targeting French supermarket fridges, framing the impact as food spoilage rather than ordinary data theft. No threat actor attribution was provided in the available source.

  

• Registry hijacking used to obtain certificates.
  The Hacker News reported that attackers hijacked .gh, .sl, and .as registries to obtain certificates for Google Domains.

• AI pentesting tool tied to financial-sector data theft.
  The Hacker News reported that the ARTEX AI pentesting tool was used in data theft attacks on South Korean financial firms.

1 sources

time.com

‘Unprecedented’ Cyberattack Targets French Supermarket Fridges

Vulnerabilities & Patches

• Microsoft Patch Tuesday volume and zero-days.
  Multiple outlets described Microsoft’s October 2026 Patch Tuesday as a record release: SecurityWeek reported 1,413 vulnerabilities, BleepingComputer reported 1,411 flaws, and Tenable reported 1,407 CVEs. BleepingComputer said the update addressed one actively exploited and two publicly disclosed zero-day vulnerabilities, and Tenable identified CVE-2026-96951 as the exploited zero-day.

  

• Windows security bypasses and unauthenticated RCEs.
  DarkReading reported that the overgrown October update included zero-days with security bypasses and unauthenticated remote code execution.

• Adobe advisories cover 176 vulnerabilities.
  SOCFortress reported that Adobe recently published 11 security advisories addressing 176 vulnerabilities across multiple software offerings, including ColdFusion.

• Unpatched LMCache flaw.
  The Hacker News reported an unpatched critical LMCache flaw that lets unauthenticated attackers run code remotely.

Breaches & Incidents

• French supermarket refrigeration incident.
  Time reported the attack targeted French supermarket fridges and had consequences for food security. The available source excerpt did not provide full scope, exposed data, or remediation status.

• South Korean financial-sector data theft.
  The Hacker News reported data theft attacks on South Korean financial firms involving the ARTEX AI pentesting tool. Scope and response status were not provided in the available source.

• Domain certificate abuse.
  The Hacker News reported attackers obtained certificates for Google Domains by hijacking .gh, .sl, and .as registries. Scope and response status were not provided in the available source.

Industry & Policy

• U.S. bounty tied to HAFNIUM case.
  The Hacker News reported the U.S. offered up to $10 million for tips on Zhang Yu, charged in HAFNIUM hacks.

• Record patch burden highlighted.
  Zero Day Initiative wrote that another month of patches equaled another new record for Microsoft patches and also discussed Adobe patches.

• Vendor response to credential exposure.
  The Hacker News reported an FBI warning about FortiBleed’s continued activity and 86,644 Fortinet device credentials.

What to Watch

• Additional exploitation indicators for CVE-2026-96951 as Windows patch deployment continues.
• Further reporting on FortiBleed credential exposure and possible follow-on abuse.
• Adobe product exposure after 11 advisories covering 176 vulnerabilities, including ColdFusion.

Reader Action Items

• Apply Microsoft’s October 2026 security updates now, prioritizing systems that could be affected by CVE-2026-96951.
• Audit Fortinet environments for signs of FortiBleed credential collection and reset exposed credentials.
• Patch Adobe products covered by the new advisories, including ColdFusion, and review retail/food OT segmentation after the French supermarket refrigeration report.