The LeadSecurity10 Oct 2026

`123456' password used in Danish CPR data breach

Coverage at Hacker News (Security). The CloudySec Digest links rather than summarises this report; read the full piece at the source.

By Hacker News (Security)Read at Hacker News (Security)

Security

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Five U.S. states now allege TP-Link misrepresented router security and China-entity separation — European enterprises should monitor whether similar scrutiny extends to EU procurement rules.

THN (Feedburner)9 Oct

Security

Microsoft: Outdated Windows devices will stop receiving security updates

Microsoft's upcoming Windows Update certificate rotation will cut off security patches for devices on unsupported OS versions — a hard deadline that forces European enterprises to retire or isolate legacy systems.

BleepingComputer9 Oct

Security

OAuth grants pile up faster than you can review them. Here's how to keep up.

The Klue breach highlights how forgotten OAuth grants between SaaS apps serve as persistent backdoors — enterprises must treat grant lifecycle management as a core identity-security control.

BleepingComputer8 Oct

The Security Desk

All filed stories from the security desk this week.

Security11 stories