Cybersecurity news we picked for Wednesday, October 28, 2026.
The stories were published from Monday, October 26, 2026 to Wednesday, October 28, 2026. Added on Wednesday, October 28, 2026.
We picked these stories. Each summary is in our own words.
Microsoft updated Windows to stop trusting certificates tied to compromised eMudhra keys, Microsoft says
Good to know
Reported by Cyber Security News, published Wednesday, October 28, 2026.
Microsoft posted its response on its security blog on Monday, October 26, 2026. eMudhra is a certificate authority, a company that issues digital certificates (files computers use to decide which websites and software to trust). The post says eight of eMudhra's private certificate keys were compromised: six for secure website connections and two for signing software. It says the problem began in eMudhra's own chain of certificates, not in Microsoft's systems. On Tuesday, October 20, 2026, Microsoft updated the Windows list of certificates not to trust, the post says. On Monday, October 26, 2026, it released an extra Windows update, outside its usual schedule, that removes seven certificates.
What this means for you
This story is about people who use Windows computers. It matters as news because Microsoft says keys behind some certificates were compromised. Microsoft's post advises allowing automatic Windows certificate trust updates, and updates to parts of the Edge browser, to reach devices.
Contact details of some Coinbase customers were exposed through an analytics company, one report says
Good to know
Reported by Cyber Security News, published Wednesday, October 28, 2026.
One report says a security incident at Amplitude exposed contact details of a small group of Coinbase customers. Amplitude is an outside analytics company (one that measures how people use a service) that Coinbase uses. It says Coinbase found no evidence that anyone got into its own systems. Coinbase has not confirmed how many customers are affected, or given a full list of the details exposed, the report says. It says Coinbase is notifying affected users and regulators, under its legal duties.
What this means for you
This story is about people who have a Coinbase account. It matters as news because, the report says, details like these can help scammers send customers believable messages about restricted accounts. Cyber Security News advises checking security notices in the Coinbase app or on its website directly, not through unexpected links. The article also advises affected users to be cautious about unasked-for contact.
DreamHost is resetting some email and file-transfer passwords as a precaution, one report says
Good to know
Reported by SecurityWeek, published Tuesday, October 27, 2026.
One report says DreamHost, a web hosting provider (a company that keeps websites on its computers), is resetting some passwords as a precaution. It says they are the passwords of some email users and some FTP and SFTP users. FTP and SFTP are ways of moving files to and from a website. It says DreamHost described an issue with its systems that affected its webmail (email read in a web browser) and its File Manager tool. SecurityWeek says it has asked DreamHost how many users were affected and what caused the issue.
What this means for you
This story is about people who use DreamHost's email, or its FTP or SFTP service. It matters as news because DreamHost is resetting some passwords. SecurityWeek's report also gives DreamHost's advice to account owners about their passwords.
