By Guru Baran
Publication Date: 2026-10-05 01:28:00
This week’s security newsletter was dominated by a Pentagon personnel data breach affecting more than three million people, actively exploited zero-days in Apple CoreGraphics and Fortinet FortiMail, and reports of two still-unpatched Citrix NetScaler RCE flaws.
The broader bulletin covers 26 developments spanning cloud identity, malware, AI-agent governance, remote access, browser security, vulnerable infrastructure, and defensive tooling.
Pentagon Data Breach
The Pentagon confirmed that unauthorized users accessed a Defense Manpower Data Center information system through a file-sharing vulnerability. The incident affected 2.76 million living people and approximately 294,000 deceased individuals, with access reportedly occurring between October 2025 and July 2026 before DMDC discovered and patched the flaw on July 16.
The compromised files contained unencrypted information that could include names, Social Security numbers, birth dates,…
