Infosec bits for 2026 week 42
Anele Siwela
| Oct. 16, 2026, 3:05 p.m.
Cybersecurity News
Microsoft’s Recent Windows Updates Break Remote Desktop Services With Error “0xC000000D” [Guru Baran, Cyber Security News]
PoC Released for Critical Fortinet FortiClient EMS Authentication Bypass Vulnerability [Abinaya, Cyber Security News]
SA grapples with growing demand for AI and cyber security skills [Chris Tredger, IT Web]
Thousands of refrigerator devices remain exposed following French cyberattack [David Jones, Cyber Security dive]
At World's Largest Hacking Conference, Embry‑Riddle Students Showcase Aviation Cybersecurity Skills [Keaton S. Ziem, Embry-Riddle Aeronautical University]
Vulnerabilities & Patches:
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects [Swati Khandelwal, The Hacker News]
Microsoft Patches Two Dozen RCE Flaws in Office [Ionut Arghire, Security Week]
Microsoft Windows Shell 0-Day Vulnerability Actively Exploited in Attacks [Guru Baran, Cyber Security News]
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise [Ionut Arghire, Security Week]
Malware:
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions [Ravie Lakshmanan, The Hacker News]
Hackers Use ClickFix and Python Tunnels to Prepare Systems for Ransomware Attacks [Tushar Subhra Dutta, Cyber Security News]
Ransomware Attacks Double Year over Year as July 2026 Cyber Threat Volumes [Africa Lorna Hardie, IT News Africa]
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions [Ravie Lakshmanan, The hacker News]