https://zarguell.github.io/tia-n-list/ The daily threat landscape, one item per day. en-us Wed, 14 Oct 2026 03:12:03 +0000 https://zarguell.github.io/tia-n-list/daily/2026-10-13/ https://zarguell.github.io/tia-n-list/daily/2026-10-13/ Tue, 13 Oct 2026 11:15:00 +0000 An unprecedented attack drove forced defrost cycles into refrigeration at hundreds of French supermarkets via a known unpatched Danfoss flaw while Ahold Delhaize took systems offline in a separate incident, and physical-world damage dominated again as Ledger confirmed a hardware supply-chain implant and Yandex lost three data centers to drone strikes. Patch hygiene kept pace: GitLab published fixed builds for its CVSS 10.0 unauthenticated RCE, SAP's October batch leads with a 9.9 S/4HANA takeover bug, and Bricksforge's CVSS 10.0 WordPress RCE is already exploited in the wild. https://zarguell.github.io/tia-n-list/daily/2026-10-12/ https://zarguell.github.io/tia-n-list/daily/2026-10-12/ Mon, 12 Oct 2026 11:15:00 +0000 Honeypots confirmed in-the-wild exploitation of SonicWall's max-severity SMA1000 SSRF within a day of patching, while public PoC code landed for a pre-auth root RCE in AnyDesk for Linux. The FBI pinned its ShinyHunters breach on one missed patch on a contractor's PeopleSoft platform, GitLab and WuKong_HRM shipped CVSS-critical access flaws, and Let's Encrypt set the certificate ecosystem on a path to 64-day defaults. https://zarguell.github.io/tia-n-list/daily/2026-10-11/ https://zarguell.github.io/tia-n-list/daily/2026-10-11/ Sun, 11 Oct 2026 11:15:00 +0000 Agentic AI dominates the day: CrowdStrike's widening ARTEX account and Anthropic's sandbox-escape response lead, followed by Pwn2Own Ireland's 98 zero-days, the naming of Cypfer's arrested co-founder, the '123456' admin account behind Denmark's 8.8-million-record CPR breach, and Proofpoint's finding that multiple state-aligned actors share the BlueMoon exploit kit. https://zarguell.github.io/tia-n-list/daily/2026-10-10/ https://zarguell.github.io/tia-n-list/daily/2026-10-10/ Sat, 10 Oct 2026 11:15:00 +0000 Law enforcement leads the day with Germany's confirmed custody of a suspected Qilin core member and an FBI arrest inside the ransomware-negotiation world, while defenders face same-week exploitation of freshly patched SonicWall SMA1000 and AhsayCBS backup flaws, a public Telegram Desktop takeover PoC, and a single-prompt attack chain against AWS Bedrock AgentCore. https://zarguell.github.io/tia-n-list/daily/2026-10-09/ https://zarguell.github.io/tia-n-list/daily/2026-10-09/ Fri, 09 Oct 2026 11:15:00 +0000 A seven-domain seizure against Flax Typhoon's Integrity Technology Group tooling leads a day defined by developer-supply-chain scale, with FakeGit's 17,610-repo GitHub fleet and in-the-wild exploitation of NetScaler, Ahsay backup and Atlassian flaws driving urgent patching.