Cyber news on October 19, 2026

1. 0108:30 UTC

   SBI says 3,897 customer records identified on dark web after CERT-In alert

   +6 26 outlets · first: India Today Data breach

   Machine summary Exposed fields reportedly included names, dates of birth, mobile numbers, email and residential addresses, branch and CIF identifiers, lead IDs and loan-application metadata.

   Reported by India Today, SQ Magazine, LinkedIn, NDTV Profit, Central Oregon Daily, economictimes.indiatimes.com, and 19 more outlets.

   • State Bank of India
   • CERT-In
   • Independent CERT-In-empanelled cybersecurity agency

   Full coverage: every report, when each was published, and who was named (26 outlets)

2. 0212:44 UTC

   Coverage recordboredhackerblog.info: “Plex vulnerabilities being exploited in the wild to drop a cryptominer”

   2 outlets · first: securityweek.com Vulnerability

   Reports ran between 12:44 and 13:36 UTC on Oct 19.

   The outlets that reported this event are listed with links to their reports; no summary of ours passed our automated checks for it, which says nothing about the event (how they work).

   Reported by securityweek.com and boredhackerblog.info.

   • Plex

3. 0316:15 UTC

   DHS orders DeepSeek removed from all federal civilian systems

   2 outlets · first: Seeking Alpha Threat intelligence

   Machine summary DHS ordered U.S. civilian agencies to remove DeepSeek from their systems and halt purchases of it and services built on its models, saying the models present "multiple threat vectors" and that their use "may result in the transfer of sensitive data to the PRC," Decrypt reported. Decrypt also noted DeepSeek's open-source models can run locally or on any provider's servers, with the developers hosting a version in China for DeepSeek.com users.

   1. DHS stated the models present "multiple threat vectors" and that their use "may result in the transfer of sensitive data to the PRC," according to Decrypt.
   2. A July DHS memo, made public Monday, had already directed agencies to monitor traffic in and out of government websites for DeepSeek-related risks (Decrypt).
   3. DeepSeek had already been barred from government devices by the Navy and the Commerce Department, while comparable actions were taken by Virginia, Tennessee and New York (Decrypt).
   4. On Jan. 27, 2025, an open-source model from DeepSeek, developed for less than $5 million, drove a 16% decline in Nvidia stock and cut the chipmaker's valuation by roughly $600 billion; according to Decrypt, U.S. technology companies were estimated to have lost $1 trillion that day.
   5. DeepSeek is a Hangzhou-based startup whose open-source model can run locally or on any provider's servers; Decrypt cited Perplexity serving it from U.S. servers and a developer-hosted version on servers in China for DeepSeek.com users.

   Reported by Decrypt and Seeking Alpha.

   • NVIDIA
   • DeepSeek

4. 0418:51 UTC

   Bullhorn disables platform access to contain cyberattack

   2 outlets · first: bleepingcomputer.com Data breach

   Machine summary Bullhorn said it detected a cyber incident on its platform and temporarily disabled access to its systems to contain the activity, after a system-wide outage it confirmed was caused by a cyberattack. The company reported isolating the issue and eradicating the immediate threat, with a forensic investigation started and, per its FAQ page, no determination yet on whether customer data was exfiltrated. Security reviews are being conducted with help from CrowdStrike specialists, per the company's updates reported by BleepingComputer.

   1. Bullhorn said it temporarily disabled access to its systems to contain a cyber incident and has since isolated the issue and eradicated the immediate threat, according to updates reported by BleepingComputer.
   2. Bullhorn states it serves more than 10,000 customers worldwide with cloud staffing and recruitment software covering candidate tracking, onboarding and payroll.
   3. Bullhorn's FAQ page says a forensic investigation has started and has "not yet determined whether customer data was exfiltrated"; the company said it would notify affected individuals directly if a breach is confirmed.
   4. Bullhorn said security reviews are being conducted with help from CrowdStrike specialists and gave no timelines for restoring affected services.

   Reported by bleepingcomputer.com and The Register.

   • CrowdStrike
   • Bullhorn

Each summary and its key facts are a machine summary of the reports linked under it; the outlets, times and counts come from those reports' own records. How a rundown is built.