BAE incident turns a court outage into a supplier-resilience testBeyondTrust zero-day requires appliance and credential containmentRefrigeration attacks widen into a cross-vendor OT exposure problemCisco email gateway exploitation demands cluster-level compromise checks
BAE incident turns a court outage into a supplier-resilience test
A cybersecurity incident at BAE Systems has stopped the contractor-operated Bankruptcy Noticing Center from producing and distributing notices for every federal bankruptcy court, exposing a national dependency with no published restoration time.
Security.io Intelligence Desk · Friday, 16 October 2026
Executive consequence
The Administrative Office of the U.S. Courts has confirmed that a cybersecurity incident affecting BAE Systems disrupted the Bankruptcy Noticing Center, halting nationwide bankruptcy-notice production and distribution.
Decision today
Activate alternative bankruptcy-notice monitoring for legal, treasury and claims teams.
Read the full decision briefPrimary reporting: Administrative Office of the U.S. Courts · U.S. Bankruptcy Court, District of Hawaii · BleepingComputer
Decision intelligence, not a headline feed.Every edition ranks what security leaders should read first, assign today and monitor next.
Daily executive briefing
Security.io Daily Headlines
Five equally weighted stories: what happened and the leadership decision each creates.
BeyondTrust and Mandiant disclosed active zero-day exploitation of CVE-2026-102764 in Remote Support. The documented actor used SAWFLY and BARECLAW, escalated to root, targeted stored credentials, altered administrative permissions and removed logs.
Do today
Inventory every Remote Support appliance and confirm its hosting model.
CERT-FR has identified numerous compromises of Danfoss, Copeland and Dixell refrigeration-management systems. French officials reported effects at roughly 700 supermarkets.
Do today
Inventory every refrigeration controller with model, firmware, owner and internet exposure.
CVE-2026-76519 is under active exploitation and can give unauthenticated attackers root command execution on configured Cisco Secure Email Gateway appliances. Cisco published a direct version check, compromise scan and recovery guidance; NIST records a federal remediation deadline of October 17.
Do today
Run contentscannerstatus on every Secure Email Gateway.
An authoritative Legal Aid Agency update has materially widened the known scope of its older cyber incident. Approximately 250,000 records predate 2007, the earliest verified record dates from 1978, and exfiltrated material included limited probation information and provider data.
Do today
Reopen breach scoping where legacy repositories or connected datasets were excluded.
Security.io editorial scores from 0–100. Exposure reflects affected operating models, urgency reflects decision time, and business consequence reflects operational, legal and data impact. These are comparative editorial scores, not external measurements. Source: Security.io editorial scoring based on the five selected and validated source sets.
Back page
Daily comic · Circuit Chuckles
A brief pause after the intelligence
Change Advisory Board
Rusty treats the change advisory board as a literal bulletin board on wheels that advises against sudden movement.
