• With October coming to a close, ESET Chief Security Evangelist Tony Anscombe (https://www.welivesecurity.com/en/our-experts/tony-anscombe/) reviews some of the top cybersecurity stories that made the news over the month. At the same time, he offers insights that the latest wave of incidents hold for your company's, or your own, cyber-defenses. Here's Tony's rundown of some of what stood out most in October:
• Over the past ten days, the cybersecurity news cycle has been dominated by two critical vulnerabilities in PHP, a server-side scripting language powering some 70 percent of websites globally. Here's what you should know more about the pair of flaws known as PHP2Shell, as well as related topics – and we also dived into the issues in this video (https://www.welivesecurity.com/en/videos/php2shell-what-know-two-critical-php-flaws/) and this blog post. (https://www.welivesecurity.com/en/business-security/lessons-cybersecurity-black-week/)
• Cyberattackers broke into refrigeration controllers at up to 700 French supermarkets (https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/) and raised the temperature of refrigerators and freezers to as high as 50 degrees Celsius.
• A data breach at Denmark’s Central Population Register (CPR) has exposed the personal information of 8.8 million people. (https://www.helpnetsecurity.com/2026/10/06/denmark-central-population-register-cpr-data-breach/) The person claiming responsibility for the hack claims (https://www.theregister.com/security/2026/10/13/123456-password-linked-to-denmark-data-breach-affecting-88m-people/5302726) to have gained access through a third-party provider's account that was 'protected' by the password ‘123456’.
• Malware preinstalled (https://thehackernews.com/2026/10/low-cost-android-phones-ship-with.html) on thousands of cheap Android phones that can generate fraudulent ad revenue and potentially turn infected devices into parts of larger botnets – a problem that we also wrote about a while back. (https://www.welivesecurity.com/en/mobile-security/these-arent-android-phones-you-should-be-looking-for/)
What are the lessons that businesses should take away from the latest cybersecurity news? Watch Tony's video to find out, and be sure to check out the September 2026 edition (https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-september-2026/) of his monthly security news roundup for more insights.
All this & more on https://www.welivesecurity.com/en/
• Over the past ten days, the cybersecurity news cycle has been dominated by two critical vulnerabilities in PHP, a server-side scripting language powering some 70 percent of websites globally. Here's what you should know more about the pair of flaws known as PHP2Shell, as well as related topics – and we also dived into the issues in this video (https://www.welivesecurity.com/en/videos/php2shell-what-know-two-critical-php-flaws/) and this blog post. (https://www.welivesecurity.com/en/business-security/lessons-cybersecurity-black-week/)
• Cyberattackers broke into refrigeration controllers at up to 700 French supermarkets (https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/) and raised the temperature of refrigerators and freezers to as high as 50 degrees Celsius.
• A data breach at Denmark’s Central Population Register (CPR) has exposed the personal information of 8.8 million people. (https://www.helpnetsecurity.com/2026/10/06/denmark-central-population-register-cpr-data-breach/) The person claiming responsibility for the hack claims (https://www.theregister.com/security/2026/10/13/123456-password-linked-to-denmark-data-breach-affecting-88m-people/5302726) to have gained access through a third-party provider's account that was 'protected' by the password ‘123456’.
• Malware preinstalled (https://thehackernews.com/2026/10/low-cost-android-phones-ship-with.html) on thousands of cheap Android phones that can generate fraudulent ad revenue and potentially turn infected devices into parts of larger botnets – a problem that we also wrote about a while back. (https://www.welivesecurity.com/en/mobile-security/these-arent-android-phones-you-should-be-looking-for/)
What are the lessons that businesses should take away from the latest cybersecurity news? Watch Tony's video to find out, and be sure to check out the September 2026 edition (https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-september-2026/) of his monthly security news roundup for more insights.
All this & more on https://www.welivesecurity.com/en/