Write a regular expression that validates a password string with the following criteria: it must be at least 10 characters long, contain at least one uppercase letter, one lowercase letter, one digit, and one special character from the set [!@#$%^&].