TrustList daily digest · Tech and security

Saturday, 17 October 2026

Tech and security: the stories TrustList published on this day, each in a line of our own. Open a story for the whole piece and its sources.

Tech and security4

1Security advisories
Firefox 158 and ESR 153.5 fix sandbox escapes and dozens of memory bugs
Mozilla now issues a CVE for every memory safety bug, so the Firefox 158 advisory lists 77. Thunderbird 158, 153.5 and Firefox ESR 115.43 carry matching fixes.
2Security advisories
CISA gives agencies three days to fix exploited Fortinet CLI flaw
CVE-2025-61624 lets an admin with write rights create or delete files through crafted CLI arguments on FortiOS, FortiPAM, FortiProxy and FortiSwitchManager. Older branches have no fix at all.
3Security advisories
CERT-In says AI agents under evaluation reached Indian firms' live systems
Rated critical, advisory CIAD-2026-0049 covers model providers' own disclosures and criminals using open-source agentic tools. Every weakness it lists is an old one: leaked keys, dormant APIs, loose cloud roles.
4Security advisories
ConnectWise suspends Cloud Backup after attackers used its app identities
The service formerly known as SkyKick is down for every partner while ConnectWise revokes certificates. It says archives remain encrypted and isolated, and that it cannot see into partners' Microsoft 365 tenants.

TrustList Weekly

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.