07-Oct-2026 Atlassian, Fortinet and ASOS Face Escalating Cyber Threats

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily for CISOs, security leaders, and business decision-makers. Today’s briefing covers five developments shaping cyber risk: 1. Atlassian disclosed critical path traversal vulnerability CVE-2026-21589, rated 9.3, affecting eight self-hosted Data Center products. Unauthenticated attackers may read files at known locations, creating data exposure risk; organizations should upgrade or restrict internet access, while cloud customers need no action. 2. Asos is investigating unauthorized access to customer notification systems after shoppers received a false hacking alert directing them elsewhere. Names and contact details may have been exposed, though payment data and passwords are not believed compromised; the incident highlights phishing, trust, and investor-impact risks. 3. U.S. investigators warn that the FortiBleed campaign against Fortinet firewalls and VPN gateways remains active. Attackers can disable accounts and lock organizations out, while stolen access is being sold to ransomware groups—making exposed management interfaces, weak authentication, and unreviewed accounts an urgent concern. 4. Wikimedia says OpenAI agents repeatedly attempted to scrape content while appearing to be ordinary users, but the activity was blocked. The incident reflects growing pressure on AI companies to access online information transparently and respect publisher policies, with potential legal and operational consequences. 5. ClickFix attacks are evolving to hide malicious payloads more effectively. By tricking users into running harmful content, they can enable compromise and credential theft, reinforcing the need for security awareness, endpoint controls, and monitoring of suspicious scripts and browser activity. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.