VulnHub

Real-time Cybersecurity News

Yandex confirms service outage as users lose access to cloud files

BleepingComputer

Overview

Yandex, the Russian cloud service provider, has reported a significant service outage due to drone attacks that damaged three of its data centers. As a result, the company was forced to shut down two facilities entirely and partially disable a third. This disruption affects users who rely on Yandex for cloud storage and other digital services, as they currently cannot access their files. The incident raises concerns about the security of data infrastructure in the face of increasing physical attacks on technology companies. Yandex has not yet provided a timeline for when services will be fully restored.

Key Takeaways

  • Affected Systems: Yandex cloud services, Yandex data centers
  • Timeline: Ongoing since [date of incident]

Original Article Summary

Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third. [...]

Impact

Yandex cloud services, Yandex data centers

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Ongoing since [date of incident]

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

TFG London cyberattack disrupts systems at Hobbs and Whistles retailers

BleepingComputer

TFG London has reported a cybersecurity incident affecting its IT systems, particularly those used by its premium fashion brands, including Phase Eight, Hobbs, and Whistles. As a result of this attack, operations at these retailers have been disrupted. The exact nature of the incident hasn't been detailed, but the impact on the brands could lead to significant operational challenges, affecting their ability to serve customers effectively. This incident raises concerns about the security measures in place at fashion retailers and the potential risks they face from cyber threats. It's crucial for companies in this sector to assess their cybersecurity protocols to prevent future incidents.

Oct 13, 2026

Ivanti warns of Connect Secure zero-day exploited in attacks

BleepingComputer

Ivanti has issued a warning regarding a zero-day vulnerability in its Connect Secure (ICS) remote access gateway that is currently being exploited by attackers. This flaw allows unauthorized access to sensitive systems, putting organizations at risk. Ivanti is urging customers to implement patches immediately to protect their systems from potential intrusions. The vulnerability affects users of the Ivanti Connect Secure product, which is widely used for secure remote access. Given the nature of the vulnerability and its active exploitation, it’s crucial for affected organizations to act swiftly to mitigate any potential damage and secure their networks.

Oct 13, 2026

Docker Hub flaw let attackers impersonate users, tamper with images

BleepingComputer

Docker has revealed a serious vulnerability in Docker Hub, identified as CVE-2026-105445. This flaw allowed attackers to impersonate other users by exploiting a personal access token (PAT), which could lead to unauthorized access to container repositories. As a result, attackers could potentially tamper with images stored in these repositories, posing significant risks to users who rely on Docker Hub for their container management. The incident underscores the need for all Docker Hub users to review their security practices, especially regarding the management of access tokens. Docker has urged users to take steps to secure their accounts and monitor their repositories for any unauthorized changes.

Oct 13, 2026

SAP warns of maximum severity OAuth2 SSRF security flaw

BleepingComputer

SAP has issued a warning regarding a severe vulnerability affecting its Cloud SDK for Python, part of a larger security update addressing 20 flaws across various products. This particular vulnerability is classified as maximum severity, indicating that it poses a significant risk to users and their systems. Companies using the affected SDK should act quickly to mitigate potential threats. The update comes as part of SAP's October 2026 security measures, highlighting the ongoing need for vigilance in software security. Users are encouraged to apply the necessary patches to protect their systems from potential exploitation.

Oct 13, 2026

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

The Hacker News

Researchers have identified three vulnerabilities in LG's webOS that can be exploited to give attackers root access to certain LG smart TVs without needing a PIN or any interaction from the owner. This means that anyone on the same local network could potentially take control of these TVs. The affected models include the 32LQ636BPSA and the 27TQ600SW, both running webOS version 7.5.7-25. LG has acknowledged the issue and released a fix to address these vulnerabilities, which was detailed in an advisory published on October 12. This incident raises concerns about the security of smart devices in general, as vulnerabilities like this could allow unauthorized access to personal data and control over the device itself.

Oct 13, 2026

Cyberattack Prompts Ahold Delhaize to Disconnect Systems

SecurityWeek

Ahold Delhaize, the parent company of several grocery brands, has taken some of its systems offline following a cyberattack that posed a security threat to its network. The company acted swiftly to contain the issue, though specific details about the nature of the attack or the systems affected have not been disclosed. This incident raises concerns about the security of retail networks, especially as cyberattacks become more common in the industry. Customers and employees may face disruptions as the company works to restore its systems and ensure the security of its operations. The situation serves as a reminder for businesses to remain vigilant in protecting their networks against potential cyber threats.

Oct 13, 2026