Monthly Roundup

An independent, attributed roundup of the major cybersecurity incidents of October 2026 — from the PHP2Shell critical RCEs and the ConnectWise Cloud Backup supply-chain compromise to breaches at ETS, Denmark’s population register, Zeabur, Railway, Burger King Japan and more. Each item carries a verification status (confirmed, claimed or rumoured) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of September 2026 — from the actively-exploited Citrix NetScaler and Arista VeloCloud zero-days to the Pentagon Defense Manpower Data Center breach, the Gyazo compromise, the Keio ransomware attack and the disputed ShinyHunters FBI-jobs claim. Each item carries a verification status (confirmed, claimed, reported or rumoured) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, defensive roundup of August 2026’s biggest cyber incidents: the BeyondTrust Remote Support zero-day (CVE-2026-102764) exploited by a China-nexus actor from late August, the McKesson and Manchester Airports Group breaches, a record 997 ransomware claims, social-engineering hits on Apollo, RingCentral and Carhartt, OT attacks on energy and water, and the AI angle. Each item carries a status label (Confirmed / Claimed / Reported) and a subjective 1–10 severity read.

An independent, defensive roundup of the major cyber incidents reported in July 2026 — the Fairlife/Coca-Cola ransomware shutdown, Clop's PTC Windchill data-theft campaign, the 12-million-record KDDI breach, Accenture's source-code incident, a coordinated OT attack on 30+ Minnesota water utilities, and the actively-exploited ColdFusion and Langflow flaws. Each item carries a status label (Confirmed / Claimed / Reported) and a subjective 1–10 severity read, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of June 2026 — from the Oracle PeopleSoft zero-day (CVE-2026-35273) that ShinyHunters used against 100-plus universities and Microsoft’s record ~206-CVE Patch Tuesday to breaches at iRhythm, Novo Nordisk, Tata Electronics and Kodak and a wave of npm supply-chain compromises. Each item carries a verification status (confirmed, claimed or reported) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of May 2026 — from the ShinyHunters Canvas/Instructure extortion and the TanStack supply-chain worm that reached OpenAI to the DigiCert code-signing abuse, a suspected Iranian attack on US gas-station tank gauges, and breaches at Carnival, Charter/Spectrum, West Pharmaceutical and more. Each item carries a verification status (confirmed, claimed or reported) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of April 2026 — from the ShinyHunters Salesforce extortion wave hitting Charter/Spectrum, ADT, Pitney Bowes, Vimeo and Medtronic, to the ChipSoft ransomware attack on Dutch hospitals, the France Titres (ANTS) identity-portal breach, a Microsoft SharePoint zero-day and the ~$290M Kelp DAO crypto theft. Each item carries a verification status (confirmed, claimed or reported) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of March 2026 — from the TeamPCP supply-chain campaign that poisoned LiteLLM and security-scanner packages on PyPI, to the Handala wiper that erased 200,000+ Stryker devices, the Cl0p Oracle E-Business Suite extortion wave, and breaches at Cegedim Sante, Navia, Aura, Crunchyroll and Telus. Each item carries a verification status (confirmed, claimed or rumoured) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of February 2026 — from Microsoft’s six actively-exploited zero-days and the BeyondTrust and Ivanti EPMM flaws to breaches at the University of Mississippi Medical Center, France’s national bank account registry (FICOBA), CarGurus, Figure, Advantest and Singapore’s four telcos. Each item carries a verification status (confirmed, reported or claimed) and a clearly-labelled subjective editorial severity, with a defensive takeaway.

An independent, attributed roundup of the major cybersecurity incidents of January 2026 — the ShinyHunters wave against Match Group, Bumble and Crunchbase, a 149-million-credential infostealer dump, large healthcare and regulator breaches disclosed this month (Covenant Health, CIRO, Under Armour), and the actively-exploited vulnerabilities CISA added to its KEV catalog (Zimbra, Versa Concerto and more). Each item carries a verification status (confirmed, claimed or reported) and a clearly-labelled subjective editorial severity, with a defensive takeaway.