Cyberattack Law and Disclosure Digest for 2026-10-21
Key Facts
- Primary record digest compiled for 2026-10-21.
- Aggregates official announcements from DOJ, CISA, SEC EDGAR, and allied cyber agencies.
- All cited documents are in the public domain or official government publications.
Summary of official government advisories, court filings, and sanctions published on 2026-10-21.
HMS Networks PEAK-System PCAN Windows drivers ↗
Summary
Successful exploitation of these vulnerabilities could crash the Windows kernel.
The following versions of HMS Networks PEAK-System PCAN Windows drivers are affected:
- PEAK-System Device Driver Setup <=5.1.2.1151 (CVE-2026-109576, CVE-2026-101103, CVE-2026-94188, CVE-2026-103672, CVE-2026-110322, CVE-2
Moxa AIG-302 ThingsPro Edge ↗
Summary
Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information.
The following versions of Moxa AIG-302 ThingsPro Edge are affected:
- Moxa AIG-302 ThingsPro Edge firmware <=1.4.0 (CVE-2026-109812, CVE-2026-109813)
#StopRansomware: SafePay Ransomware ↗
Advisory at a Glance
Title #StopRansomware: SafePay Ransomware Original Publication October 20, 2026 Executive Summary This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since August 2024, targeting businesses and critical infrastructure across North America, South America, Europe, and Australia. SafePay actors
Hitachi Energy MicroSCADA X SYS600 Product ↗
Summary
Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
The foll
CISA Adds Six Known Exploited Vulnerabilities to Catalog ↗
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
- CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
- CVE-2026-96654 Plex Media S
Hitachi Energy RTU500 Product ↗
Summary
Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. These vulnerabilities if exploited can have impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.