Severity: HighAction: Be aware

Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts

Southern Company is notifying customers that their utility account information was accessed by hackers.

Excerpt from the primary source: SecurityWeek

Who is affected

Security professionals

What you should do · Be aware

No immediate action is indicated. Share this with the relevant teams and watch for updates.

Automated guidance based on this story's classification. Check the linked advisories for specifics.

Sources

We link to original and authoritative sources. Headlines and excerpts belong to their publishers.

Original reporting

Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts SecurityWeek · securityweek.com · Oct 7, 2026 · Primary source
Severity: HighAction: ReviewExploitation: Exploited

Ninja Forms plugin flaw exploited to hack WordPress sites

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts.

Why it matters

Source reporting says attackers are already exploiting this, so exposed WordPress systems are at immediate risk.

Severity: HighAction: Be awareExploitation: Exploited

Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days.

Why it matters

Source reporting says attackers are already exploiting this, so exposed affected systems are at immediate risk.