OUTPOSTEdition 221 — 23 October 2026
Cyber, warfare technology and geopolitics as compiled on 23 October 2026.
Cyber
Breaches, campaigns, advisories and research.
Quest Diagnostics confirms data breach exposed patient records (opens the original article)
Quest Diagnostics disclosed that patient records were exposed after a threat actor gained unauthorized access to its Quanum LSM system.
Cyber BleepingComputer 2 outlets
What to checkReview access to Quanum LSM and check whether patient data or related systems require investigation.
CISA Adds One Known Exploited Vulnerability to Catalog (opens the original article)
CISA says it added one vulnerability to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation.
Cyber CISA Advisories
What to checkCheck whether affected systems are present in your environment and prioritize remediation.
Sources1CISA Advisories
CISA Adds One Known Exploited Vulnerability to Catalog (opens the original article)
CISA added one vulnerability to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation.
Cyber CISA Advisories
What to checkCheck the KEV Catalog and prioritize remediation for affected systems.
Sources1CISA Advisories
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 23) (opens the original article)
Unit 42 identifies CVE-2026-109618 and CVE-2026-109619 as critical PHP vulnerabilities affecting software used for web servers and CMS systems.
Cyber Unit 42
What to checkCheck PHP-based web servers and CMS systems for exposure and patches.
Sources1Unit 42
Abandoned Popcorn Time app exposed millions of devices to RCE attacks (opens the original article)
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, closing a flaw that could have allowed attackers to execute malicious code with elevated privileges.
Cyber BleepingComputer
What to checkCheck for the abandoned app and vulnerable updater; remove or isolate affected installations.
Sources1BleepingComputer
Microsoft Teams to get AI-powered, context-aware phishing detection (opens the original article)
Microsoft announced plans to add AI-powered, context-aware phishing detection to Teams messages starting in early November 2026.
Cyber BleepingComputer
What to checkReview how Teams phishing alerts will fit into reporting and response workflows.
Sources1BleepingComputer
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks (opens the original article)
Microsoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, covering Python startup hooks, credential theft, remote code loading, detections, and mitigations.
Cyber Microsoft Security
What to checkReview Python startup hooks and credentials, and apply relevant detections and mitigations.
Sources1Microsoft Security
FCC bans two devices with surveillance chips linked to Huawei (opens the original article)
The FCC banned a wireless video transmitter and dashboard camera made with chips from Huawei subsidiary HiSilicon, which markets them for surveillance.
Cyber The Record
What to checkCheck whether the named devices are present in organizational equipment inventories.
Sources1The Record
Microsoft: Windows Server 2016 reaches end of support in January (opens the original article)
Microsoft says Windows Server 2016 will stop receiving security updates after reaching end of support in January 2027.
Cyber BleepingComputer
What to checkIdentify Windows Server 2016 systems and plan for support ending.
Sources1BleepingComputer
PHP shares mitigation for new RCE vulnerability with no patch (opens the original article)
The PHP security team shared mitigation measures for a new remote code execution vulnerability affecting non-default configurations; no patch is available.
Cyber BleepingComputer
What to checkCheck whether PHP systems use non-default configurations and apply the security team’s mitigation measures.
Sources1BleepingComputer
Warfare
Drones, electronic warfare, missiles and defence systems.
On The Brink Of Epic Fury Round Two? (opens the original article)
The War Zone says Israeli Air Force operations, ship movements and messaging point to the possibility that war with Iran could erupt again.
Warfare The War Zone
Why it mattersMilitary operations and ship movements are indicators analysts may monitor for changes in regional activity.
Sources1The War Zone
General Atomics FQ-42 CCA Drone Production Ramp Up To Be Boosted By Boeing Subsidiary (opens the original article)
General Atomics is working with Spirit Defense to help meet USAF demand for FQ-42 fighter drones within the next six years.
Warfare The War Zone
Why it mattersThe partnership is relevant to fighter-drone production capacity and military procurement.
Sources1The War Zone
Space Force reveals first 6 ‘operational’ contracts for civil reserve support in space monitoring (opens the original article)
Space Systems Command officials say six initial contracts support the Commercial Augmentation Space Reserve initiative; unresolved issues include service denial rights and reimbursement for lost satellites.
Warfare Breaking Defense
Why it mattersThe contracts concern commercial support for space monitoring and the terms governing that support.
Sources1Breaking Defense
Kyiv eyes purchase of planned ICEYE, Nokia ‘sovereign’ communication sats (opens the original article)
Kyiv is considering planned ICEYE and Nokia sovereign communication satellites, according to the report, amid concerns over access to Starshield.
Warfare Breaking Defense
Why it mattersThe proposal highlights the operational importance of resilient satellite communications.
Sources1Breaking Defense
Denmark To Buy Anthem Munitions, Joint Strike Missiles In Dual Long-Range Strike Push (opens the original article)
The War Zone reports Denmark plans to buy ground- and air-launched Anthem Munitions and Joint Strike Missiles for long-range strike options.
Warfare The War Zone
Why it mattersThe weapons add ground- and air-launched options for striking deep behind enemy lines.
Sources1The War Zone
Qatari Barzan unveils aerial drones, unmanned surface vessels at Milipol 2026 (opens the original article)
Qatari Barzan unveiled aerial drones and unmanned surface vessels at Milipol 2026. The company says the display reflects efforts to expand Qatar’s domestic defence and security capabilities.
Warfare Breaking Defense
Why it mattersThe systems are relevant to Qatar’s domestic defence and security capabilities.
Sources1Breaking Defense
UK-France deepen nuclear defence ties in first joint exercise (opens the original article)
The UK and France held their first joint air exercise in a French nuclear exercise, with RAF Typhoon fighters joining French Rafale jets.
Warfare UK Ministry of Defence
Why it mattersThe exercise demonstrates joint air operations linked to nuclear defence.
Sources1UK Ministry of Defence
US military needs ‘urgent revolutionary institutional change’ to prepare for modern war, Petraeus says (opens the original article)
Retired Army Gen. David Petraeus praised the Pentagon’s Autonomous Warfare Command and said the US must rapidly prepare for modern autonomous war.
Warfare Defense News
Why it mattersThe remarks focus attention on autonomous systems and military readiness.
Sources1Defense News
Geopolitics & geodata
Strategy, geo wars, GNSS and satellite security.
Russia, Ukraine agree to Melania Trump-brokered localised ceasefire (opens the original article)
President Trump says First Lady Melania Trump’s initiative led to a localized ceasefire in Oleshky.
Geopolitics Al Jazeera 2 outlets
Strategic relevanceThe reported ceasefire is a localized change in the Russia-Ukraine conflict.
Sources1Al Jazeera2DW
Romania blames Russia after drone sinks ship in the Black Sea (opens the original article)
The report says Romania blames Russia after a drone hit the Comoros-flagged Khoryv near Romanian waters; one sailor was killed and three are missing.
Geopolitics Al Jazeera 2 outlets
Strategic relevanceThe incident highlights the strategic significance of maritime activity near Romanian waters in the Black Sea.
Sources1Al Jazeera2DW
What’s at stake in Israel’s first elections since the October 7 attacks? (opens the original article)
The Atlantic Council says an unclear outcome in Israel’s elections could lead to prolonged coalition negotiations or more elections.
Geopolitics Atlantic Council
Strategic relevanceThe election outcome may shape Israel’s political stability and the period of coalition negotiations.
Sources1Atlantic Council
What will end Trump’s back-and-forth approach toward Russia and Ukraine (opens the original article)
The Atlantic Council asks whether pressure from Congress and the American public could push Trump toward a tougher stance against Putin.
Geopolitics Atlantic Council
Strategic relevanceDomestic political pressure may shape US policy toward Russia and Ukraine.
Sources1Atlantic Council
Netanyahu Orders Large-Scale Military Operation in West Bank (opens the original article)
The title says Netanyahu ordered a large-scale military operation in the West Bank; the snippet says Israeli forces will go house to house after two soldiers were killed in a shooting.
Geopolitics Foreign Policy
Strategic relevanceThe reported operation is relevant to security activity and developments in the West Bank.
Sources1Foreign Policy
Freed US citizen was tortured in Russian jail, former Ukrainian prisoners say (opens the original article)
Former Ukrainian prisoners say they witnessed Russian guards beat and sexually humiliate a US citizen during his detention.
Geopolitics BBC World
Strategic relevanceThe accounts concern detention conditions and reported treatment of prisoners.
Sources1BBC World
Nov. 5: Satellite Mission Management at the Edge (opens the original article)
SpaceNews invites readers to explore how emerging technologies and commercial capabilities are transforming satellite operations.
Geopolitics SpaceNews
Strategic relevanceSatellite mission management connects commercial capabilities with space operations.
Sources1SpaceNews
White House says Melania Trump brokered truce for Ukraine city 'on brink of disaster' (opens the original article)
The White House says Melania Trump brokered a truce for Russian-occupied Oleshky; Ukraine and Russia have not confirmed it.
Geopolitics BBC World
Strategic relevanceThe unconfirmed claim concerns a truce in a Russian-occupied Ukrainian city.
Sources1BBC World
| CVE | CVSS | Product | Ransomware | Added / due | Required action |
|---|---|---|---|---|---|
| CVE-2026-114625 | 9.4Critical | Arista VeloCloud Orchestrator | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-110447 | 9.2Critical | Collabora Collabora Online – Built-in CODE Server | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-106931 | 8.5High | EG Secure Solutions SiteGuard Server Edition | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-96656 | 8.6High | Plex Media Server | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-96655 | 5.3Medium | Plex Media Server | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-96654 | 6.9Medium | Plex Media Server | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-96652 | 5.3Medium | Plex Media Server | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-110936 | 8.4High | Siemens Software Center | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-102764 | 9.3Critical | BeyondTrust Remote Support | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2025-61624 | 6.0Medium | Fortinet Multiple Products | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-21589 | 9.3Critical | Atlassian Multiple Products | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
| CVE-2026-105134 | 9.3Critical | Ahsay AhsayCBS | None known | Added Due | Apply mitigations in accordance with vendor instructions. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage |
Source: CISA KEV catalogue; CVSS scores from NVD where published. “No score” means NVD has not scored it yet.
Keyword index
Counted from this page. Select one to filter.