Litany Of The Hacked: October 2026 Round-Up

 

What could be scarier than a ghost or goblin demanding candy? How about A GIANT YELLOWJACKET MADE OF GOURDS!

It's time again for the monthly litany of the hacked. This is our recitation of entitles that have been hacked or cyber-attacked, that we know of, in the recent month.

The point of the litany is awareness that these things happen, and therefore we like to encourage pooling resources and ideas to increase your odds of success.

The litany seems to have bulked up on Halloween candy and now includes:

TFG London...Ahold Delhaize (supermarket multi-national holding company), specifically targeting grocery store refrigerators...Frontline Education...Moderna...Quest Diagnostics (again)...Anthropic (by a DOGE alumni-founded company, Cathedral)...Dyfed-Powys Police...State of Arizona court systems...Ogi Networks Limited (ONL) and Data Cymru (entities that had passwords of, yes really, Password1)...AfD (showing that sometimes the right people get  hacked)... ConnectWise... VoidZero...banks in South Korea...Asos...ConnectWise...US Department of Homeland Security...Open Science Forum...THE ENTIRE INTERNET! (talk about giant yellowjackets)...

The scope of attacks has expanded. My favorite recent example is the Anthropic model that, um...trying not to use the word "attacked"..."interacted" with the US Department of State's passport application site to fill out some applications. 

This may be the only case where the onerous process of bureaucracy defeated an AI.

Where was the AI trying to go?

And then there was the use of AI to attack -- successfully? -- the PHP2Shell code base. Note that PHP had not otherwise been exploited; the attack created awareness to avoid a hack. But in aggravation this led to the claim that the entire internet was under attack.

Much like yellowjackets, the attack surface is everywhere. How are you positioned for this?

Ask us how you can avoid joining the litany.

(image credit: Llez, CC BY-SA 3.0 <https://creativecommons.org/licenses/by-sa/3.0>, via Wikimedia Commons)