October 2026 has seen a surge in cyberattacks and AI-identified vulnerabilities, a period now referred to as Black October. Critical flaws were discovered in PHP, a language powering approximately 70% of websites, leading to widespread server patching efforts. Cloudflare reported millions of exploitation attempts following the disclosure on October 21.
Government responses have been significant: France and Finland temporarily restricted access to certain sites, while the US National Security Agency advised immediate patching. The US military has initiated the FORTRESS program, preparing installations for 90 days of independent operation. UK citizens have been warned to prepare for potential disruptions to critical infrastructure.
Recent security breaches include the cloud platform Railway, where customer credentials and API keys were compromised. Quest Diagnostics confirmed a theft of private patient health data, and eMudhra was found to have vulnerabilities in its digital certificate authorities. GitHub also experienced a major service disruption.
Experts attribute the escalation to AI, which lowers the barrier for non-technical users to identify and exploit deep-seated code flaws. While AI can find vulnerabilities, it currently lacks the capability to fix them, forcing security teams to race against automated threats.
Security professionals advise users to improve cyber hygiene by enabling multi-factor authentication via hardware keys or apps, avoiding password reuse, and keeping software updated. Users are also encouraged to minimize their digital footprint by deleting unused apps and disconnecting unnecessary smart devices.
