Coeur d'Alene – October 19, 2026 -- Continuous Composites Inc. is opening a roughly 5,600-square-foot engineering facility in Kent, Washington, to advance its patented Continuous Fiber 3D Printing (CF3D) technology and work more closely with aerospace, defense and space customers across the Pacific Northwest.

Kent Valley site gives CF3D engineers access to an established aerospace supply base

The facility sits in the Kent Valley, which the company describes as one of the nation's most concentrated aerospace and advanced manufacturing corridors. It offers access to a skilled technical workforce and a network of aircraft, spacecraft, defense, materials and precision-manufacturing companies.

The Kent team will advance CF3D technology, develop high-temperature composite components, and collaborate with customers and industry partners.

Delray Beach – October 19, 2026 -- The global fuel gas system market for combined-cycle power plants will grow from USD 1,410.2 million in 2026 to USD 1,837.7 million by 2031, a compound annual growth rate (CAGR) of 5.4%, according to MarketsandMarkets. The market stood at USD 1,350.0 million in 2025.

Demand is driven by more complex natural gas supply streams, variations in gas composition and stricter fuel-quality requirements. These factors raise the importance of fuel gas conditioning systems in combined-cycle gas turbine (CCGT) applications. Expanding LNG-based supply chains and gas-to-power infrastructure add to adoption of systems that handle varying supply conditions.

Global – – October 19, 2026 -- The ShinyHunters extortion gang claims it has stolen data from 300 Oracle PeopleSoft instances across more than 100 organizations, BleepingComputer reported on 10 June 2026. The group says it is targeting both cloud and on-premises deployments of the enterprise suite, which large organizations use for HR, payroll, finance, supply chain, procurement and student administration.

Education sector bears most of the attacks

Most affected organizations are in education, and many were previously extorted by the same actor. ShinyHunters confirmed Nottingham University as a victim and has already published its data on the group's leak site. The university has acknowledged a cybersecurity incident in a statement.

Global – – October 19, 2026 -- Salesforce has disabled all Klue integrations after the threat group Icarus claimed on 19 June 2026 to have exfiltrated customer data through the market intelligence platform's Salesforce connection. Matching data points give high confidence that Icarus is behind the supply chain attack, according to the source analysis.

Attackers pushed token-stealing code on 11 June

The compromise began on 11 June, when anomalous behavior occurred in a system connecting Klue's various integrations. Attackers pushed a code update that could collect the OAuth tokens customers use to connect Klue to their own systems. Klue noticed the activity on 12 June, including unusual network connections to IP addresses the actor used to run commands on its backend servers.

On 13 June, Klue staff disabled the remote access, removed the token-theft code and sent customers a general alert. The alert did not say which customers were affected.

Unspecified location – October 19, 2026 -- Wiz Research found a critical vulnerability, CVE-2026-3854, that let any authenticated user execute arbitrary commands on GitHub's backend servers with a single git push command, and 88% of GitHub Enterprise Server instances remained vulnerable at the time of disclosure.

Wiz Research uncovered the flaw on 20 April 2026 in GitHub's internal git infrastructure. It affects both GitHub.com and GitHub Enterprise Server (GHES). The exploit requires only a standard git client.

GitHub.com is fully mitigated; GHES versions up to 3.19.1 stay exposed

GitHub has fully mitigated the issue on GitHub.com, and users there need to take no action. GHES versions up to and including 3.19.1 are vulnerable.

Fixed versions are 3.14.24, 3.15.19, 3.16.15, 3.17.12, 3.18.6 and 3.19.3. GitHub released patches for all supported GHES versions, and administrators are urged to upgrade immediately.

Italy – October 19, 2026 -- A newer wave of the NFCShare Android banking trojan, active since 14 May 2026, ships APKs with malformed ZIP paths that can break automated extraction tools, D3 Labs researchers reported.

Campaign shifts from Deutsche Bank lure to Italian and European brands

NFCShare first spread as a malicious APK through a phishing flow impersonating Deutsche Bank. The newer wave impersonates Italian and European banking brands and originates from a phishing site mimicking Intesa Sanpaolo. The malware shows a fake card-verification screen, asks victims to hold a payment card near the phone, collects the card PIN and sends NFC-derived card data to a WebSocket endpoint.

Core NFC logic unchanged, operations hardened

D3 Labs found the NFC and exfiltration logic largely unchanged. The changes are operational: more frequent APK rebuilds, brand rotation, URL shorteners, a new C2 endpoint and a 10-DEX layout.

Global – October 19, 2026 -- About 62% of security breaches still involve the human element, according to the 2026 Verizon Data Breach Investigations Report. That figure is pushing retail and hospitality security teams to replace annual compliance videos with human risk management (HRM), which aims to change how employees respond to attacks in real time.

Scattered Spider uses AI voice cloning to turn help desk calls into footholds

Threat groups such as Scattered Spider scrape professional networks like LinkedIn to map organization charts and identify help desk staff and executives to impersonate. They then place high-pressure calls with AI-cloned voices, posing as locked-out employees. The goal is to get agents to reset a password and enroll multi-factor authentication (MFA) on a device the attacker controls.

Europe – October 19, 2026 -- A new macOS infostealer dubbed ClickLock Stealer has targeted at least 100 victims across 33 countries since May 2026, with more than 50% of them in Europe, according to Group-IB Threat Intelligence.

Group-IB reported on 9 June 2026 that a malicious shell script uploaded to VirusTotal was assessed as a new modular stealer, likely distributed through ClickFix phishing pages. The operation has been active for approximately two months and relies on compromised WordPress domains and Telegram infrastructure. The malware needs no elevated privileges or exploits to execute.

Manchester – – October 19, 2026 -- Manchester Airports Group (MAG) has disclosed that an unauthorized third party accessed customer data on approximately 8.7 million people across Manchester, London Stansted and East Midlands airports.

Hackers obtained contact details and vehicle registration numbers

The affected data relates to parking, lounge and fast-track bookings and in-airport Wi-Fi sign-ups. The attackers obtained email addresses, phone numbers, vehicle registration numbers and postcodes.

The attack took place during peak summer travel, as millions of families were flying back into the UK before the school year. Airport operations and flights were not disrupted.

MAG says most affected customers lost only their email address

The affected systems did not store bank or payment details. According to MAG, most of the 8.7 million customers lost only their email addresses, and the impact varies by the services each person used.

Colorado Springs – October 19, 2026 -- The Tech7 Company has won a Direct to Phase II Small Business Innovation Research (SBIR) contract, facilitated by SpaceWERX, to develop the Proliferated LEO Agile Testbed Environment (PLATE) for the U.S. Space Force. Work under the award is scheduled to begin in October.

PLATE targets data pipelines never built for proliferated LEO volumes

The Space Force's shift to proliferated Low Earth Orbit (pLEO) constellations will put hundreds of distributed sensors online, each generating continuous, low-latency data streams that must be processed and acted on in near real time. Today's stove-piped, mission-specific data pipelines were not designed for that load, and PLATE is meant to close the gap.

SpaceWERX, the Space Force's innovation arm, awarded more than 300 contracts totaling $510 million in fiscal year 2025.