Skip to the rundown
GetYourBrief Cybersecurity desk · October 30, 2026
Search

Rundown · Friday, October 30, 2026

Cyber news on October 30, 2026

On Friday, October 30, 2026 the Cybersecurity desk recorded 5 news events. The earliest report came from EdSource at 07:15 UTC.

  1. 01

    Drupal confirms active attacks on Commerce Core authorization flaw

    3 outlets · first: The Hacker News Vulnerability

    Machine summary Drupal confirmed that CVE-2026-118539, an access bypass in the Commerce Core module, is being exploited against online stores and rated it 21 out of 25. Fixes are available in Commerce Core 3.3.13 and 8.x-2.41, and the advisory references audits of orders for inconsistencies.

    1. Drupal confirmed CVE-2026-118539, an access bypass in the Commerce Core module, is being exploited against online stores, according to the project's advisory
    2. The Drupal security team assigned the flaw a risk score of 21 out of 25, which the reports say indicates unauthenticated attackers can exploit it regardless of module configuration
    3. Commerce Core runs on more than 42,000 websites, including Fortune 500 companies and research universities, per Drupal usage statistics cited by BleepingComputer
    4. Affected versions are 0.0.0 through 2.41 and 3.0.0 through 3.3.13; fixes are Commerce Core 3.3.13 and 8.x-2.41
    5. Drupal published 38 additional advisories on October 28 covering 21 contributed projects, with nearly a dozen rated critical, SecurityWeek reported

    Reported by The Hacker News, bleepingcomputer.com and securityweek.com.

  2. 02

    Coverage recordndtvprofit.com: “AU SFB Data Leak: Salesforce Says No Vulnerability At Its End”

    3 outlets · first: economictimes.indiatimes.com Data breach

    Reports ran from 19:22 UTC on Oct 30 to 09:34 UTC on Oct 31.

    The outlets that reported this event are listed with links to their reports; no summary of ours passed our automated checks for it, which says nothing about the event (how they work).

    Reported by economictimes.indiatimes.com, The Hindu - Business Line and ndtvprofit.com.

  3. 03

    Coverage recordCNBC: “'Bad time to troll': Binance cofounder Changpeng Zhao asks Elon Musk for 'respect' after post about bitcoin hack”

    2 outlets · first: CNBC Threat intelligence

    Reports ran between 13:29 and 14:30 UTC on Oct 30.

    The outlets that reported this event are listed with links to their reports; no summary of ours passed our automated checks for it, which says nothing about the event (how they work).

    Reported by CNBC and Bloomberg.

  4. 04

    Coverage recordEdSource: “Bank breach delays financial aid, forces California college students to choose between books or food”

    2 outlets · first: EdSource Data breach

    Reports ran between 07:15 and 23:46 UTC on Oct 30.

    The outlets that reported this event are listed with links to their reports; no summary of ours passed our automated checks for it, which says nothing about the event (how they work).

    Reported by EdSource and hoodline.com.

    • EdSource
    • BankMobile

  5. 05

    Coverage recordBloomberg.com: “Alphabet Is in Talks to Join Trump’s Golden Dome Defense Program”

    2 outlets · first: Bloomberg.com Security

    Reports ran from 21:15 UTC on Oct 30 to 12:33 UTC on Oct 31.

    The outlets that reported this event are listed with links to their reports; no summary of ours passed our automated checks for it, which says nothing about the event (how they work).

    Reported by Bloomberg.com and ndtvprofit.com.

Each summary and its key facts are a machine summary of the reports linked under it; the outlets, times and counts come from those reports' own records. How a rundown is built.

Also covered for this desk

1 event homed on another desk that the Cybersecurity desk also carried on October 30, 2026.

  1. Oct 30 · Legal SEC puts AI-driven fraud on 2027 exam agenda for advisers 2

The days around it

Sources: the outlets' reports linked on this page; counts and times from GetYourBrief's record of those reports (methodology).