Security digest: 20 October 2026

A selection of the most notable news in security. Each story links to the original article.

Zeabur shutting down after second security breach in two months

BleepingComputer · 20 October 2026

Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable…

Nikkei discloses third data breach in a month, 1.8M records exposed

BleepingComputer · 19 October 2026

Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.

OpenCode hack exposes API keys amid AI distillation attacks

BleepingComputer · 19 October 2026

The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

Krebs on Security · 19 October 2026

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations…

Microsoft Patches More Than 1,400 Security Flaws

Krebs on Security · 13 October 2026

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times…

---

Headlines and short excerpts link to the original publishers, who own their articles. The commentary is ours.