Cyberattack Law and Disclosure Digest for 2026-10-17

Summary of official government advisories, court filings, and sanctions published on 2026-10-17.

Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials ↗

CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use phishing and smishing techniques to steal login credentials and other sensitive information or install malware on targeted devices. Election officials, candidates, and political organizations may be at

Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation ↗

The National Institute of Standards and Technology (NIST), National Security Agency’s Super Intelligence Security Center (NSA SISC) and Cybersecurity and Infrastructure Security Agency (CISA) published Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation. The product outlines ten

CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support ↗

CISA is aware of critical authentication bypass vulnerability CVE-2026-102764, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using older versions must upgrade first. Cyber threat actors are actively exploiting the vulnerability to gain initial access, then establishing persistence, escalating privile

CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

• CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability
• CVE-2026-102764 BeyondTrust Remote Su