Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.

Read more →

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. […]

Read more →

Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.

Read more →

And there’s no opt-out available.

Read more →

The launch follows the acquisition of catalog’s assets and the appointment of Laurent Guengant as CEO earlier this year.

Read more →

Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.

Read more →

Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.

Read more →

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD’s KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD…

Read more →

Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and…

Read more →

Researchers have discovered a first-of-its-kind supply-chain vulnerability in OpenAI’s official skills repository. OpenAI maintains an official GitHub repository of skills that teach AI agents how to work with various platforms and services. As an official skill, these components are often given an implicit level of trust because they are contributed or vetted by verified vendors.…

Read more →

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim’s device. […]

Read more →

Open source in the public sector doesn’t fail because of technical issues. It fails because it’s not aligned with the political agenda

Read more →

As AI labs continue to self-regulate, external evaluators play a crucial role in spotting risks.

Read more →

Suspected Chinese hackers with a proven knack for exploiting zero-days in security products are at it again, targeting BeyondTrust customers in attacks that researchers have traced back to late August.  Mandiant researchers said a likely Chinese government-backed espionage group it previously tracked as UNC5221, and now calls Armory Castle, exploited the critical defect — CVE-2026-102764…

Read more →

Microsoft’s October 2026 Patch Tuesday is the year’s largest release, with 1,408 CVEs requiring customer action, 72 of them rated critical. September, the previous high, carried 963. One CVE is already exploited: CVE-2026-96951, a Windows Shell flaw that bypasses Mark of the Web. Two were publicly disclosed before release, in the .NET Framework and the…

Read more →

Estimates for Duo preorders are now showing a ship date of late January, marking a new wait time record for Apple and its customers.

Read more →

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor.…

Read more →

Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google account credentials and multi-factor authentication (MFA) codes. The activity is being tracked by

Read more →

While many tech firms are piling on debt for long-term AI projects, Michael Dell says just-in-time manufacturing cushions his eponymous company.

Read more →

Investors are pouring more into AI data center infrastructure than they can hope to recoup by 2030, according to Gartner. “Enterprise and consumer AI revenue will be insufficient to support profitable returns on all planned AI capital expenditures during this period,” said Gartner Senior Director Analyst Will Sommer. AI data center owners would need to…

Read more →

Samsung Galaxy security support is changing for older phones. Find out which devices still receive updates and what owners should do next.

Read more →

Anthropic grants METR researchers employee-level access to internal systems for AI safety reviews, raising questions about independent oversight and transparency.

Read more →

Welcome to the week Apple showed us how serious it really is about artificial intelligence on Macs, with the company making more moves to deliver the tech in the most cost effective, responsible way. While it’s true that today is iPhone Duo pre-order day, that’s arguably not the big news.  It is not the big…

Read more →

A chain of vulnerabilities in Google’s Chrome browser could have enabled researchers to take control of one billion Windows machines worldwide — and it cost them just $40,000 in AI compute time to discover it. Researchers at Xbow USA worked for six days on developing the exploit, which earned them a $250,000 bug bounty from…

Read more →

A chain of vulnerabilities in Google’s Chrome browser could have enabled researchers to take control of one billion Windows machines worldwide — and it cost them just $40,000 in AI compute time to discover it. Researchers at Xbow USA worked for six days on developing the exploit, which earned them a $250,000 bug bounty from…

Read more →

A cybersecurity incident at BAE Systems has halted the production and delivery of bankruptcy notices for every federal bankruptcy court in the United States, disrupting a core administrative function of the judiciary with no announced date for restoration. The Bankruptcy Noticing Center, known as the BNC, produces and transmits notices in bankruptcy cases nationwide. BAE…

Read more →

Weekly summary of Cybersecurity Insider newsletters

Read more →

The Verge reports that Eiliko, a small AI robot companion made by Energize Lab, has serious security flaws that expose private conversations and let an attacker remotely change what the toy says. According to The Verge, researcher Sammy Azdoufal could access 13 million conversations and what appeared to be the entire active worldwide fleet of…

Read more →

Burger King Japan disclosed a breach exposing 11.18 million app users’ personal data after attackers accessed its membership system in early October. Burger King Japan has disclosed a data breach that exposed the personal information of approximately 11.18 million official app members. Burger King Japan, the company operating the fast-food chain in the country, said…

Read more →

OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, spent test cryptocurrency from a third-party’s wallet without authorization to complete a coding task. The incident, the AI company said, involved an internal…

Read more →

The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.

Read more →

Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can investigate unauthorized AI use and block sensitive information before it reaches personal accounts. […]

Read more →

Read more →

F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for eleven security issues in NGINX. Among them, critical vulnerabilities tracked as CVE-2026-15176 and CVE-2026-93479 could be exploited without authentication via crafted HTTP requests. Under certain conditions beyond their control, an…

Read more →

Deeper Network Promo

A driver’s license tells you who someone is and that they passed a driving test, not whether they’ll drive responsibly in the future. The same is true for bots: verifying who operates it creates accountability, but trust depends on what it does next. A known bot can still ignore website preferences, overwhelm origins, or evade controls.…

Read more →

New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments

Read more →

As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.

Read more →

Attackers are breaking into business email accounts with short messages asking whether a company can quote on an upcoming project, the kind of request sales and procurement staff answer every week. Cadence Riddle, a cybersecurity researcher at Fortra, tracked a 12-fold increase in malicious emails mentioning “RFQ” (request for quotation) between October 2025 and September…

Read more →

MDR vs EDR vs SOC explained for 2026, covering tools, monitoring, incident response, staffing and how each option supports CMMC compliance.

Read more →

Bank of America has had to spend big on IT in response to an AI security audit and findings that its anti-money-laundering (AML) controls were lacking. The bank was fined a whopping $1.2 billion for money laundering offences this week, after banking authorities identified a lax attitude to compliance. “We understand the seriousness of compliance,…

Read more →

BeyondTrust has disclosed CVE-2026-102764, a critical vulnerability in Remote Support (RS) that was exploited as a zero-day by a suspected China-nexus cyber espionage actor. The flaw carries a CVSS 4.0 score of 9.3 and can allow an unauthenticated remote attacker to perform arbitrary file operations on a vulnerable appliance. Google Threat Intelligence Group and Mandiant…

Read more →

A critical Linux kernel vulnerability tracked as CVE-2026-99999, dubbed PwnEscape, can break the isolation boundary between virtual machines and their underlying hosts. The flaw resides in the Linux networking stack and can allow attacker-controlled code running inside a guest VM to disclose host memory, crash the host, and, under demonstrated lab conditions, achieve guest-to-host code…

Read more →

Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. […]

Read more →

NVIDIA officially entered the Windows PC race this week, and its arrival brings a formidable new competitor to the premium AI PC market. With its RTX Spark platform, NVIDIA is bringing its Grace Arm CPU architecture, Blackwell GPU technology and extensive software ecosystem together in a new generation of Windows laptops. Microsoft’s Surface Laptop Ultra…

Read more →

AI can help you send more job applications. But when you lose track of where you’ve applied, a fake recruiter’s message can start to look like the reply you’ve been waiting for. Job hunting can feel like shouting into the void. You send applications, rewrite cover letters, and wait for replies that may never arrive.…

Read more →

Plus, introducing the data center soft launch.

Read more →

The AI boom is seeing one of its first major busts, as Character.ai has filed for Chapter 11 bankruptcy protection while it searches for a buyer. Founded in 2021, Character.ai enables users to create customizable chatbots and interact with them, and by February 2025 claimed to have over 20 million monthly active users. However, it…

Read more →

CAIS’ Wage Loss Dashboard puts AI-related job cuts into dollars and cents.

Read more →

The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an attacker operating inside a virtual machine (VM) could cross the isolation boundary and access the underlying host. Dubbed PwnEscape and tracked as CVE-2026-99999, a flaw allowed guest-controlled packet metadata to trigger a write that changes an IPv4 header after…

Read more →

The DORA TLPT requirements push selected EU financial entities beyond standard penetration testing. TLPT must be based on realistic threat scenarios, relevant threat actors, and current intelligence about how attacks are actually carried out. That makes threat intelligence a core part of the process. It helps define what should be tested, which TTPs matter, and…

Read more →

Three weeks before Americans vote in the 2026 midterm election, fraudsters are borrowing candidate names, logos and slogans to collect fake donations and harvest personal data, the FBI warned. “The FBI warns the public that scammers could exploit the 2026 US Midterm Election to perpetrate financial fraud schemes,” reads the public service announcement, which adds…

Read more →

In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman’s fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cribl…

Read more →

Plus: Big Tech is soft-launching data centers early and U.S. tariff pressure is prompting countries to tighten their forced-labor rules.

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Atlassian flaw, tracked as CVE-2026-21589 (CVSS score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog. In early October, threat actors started exploiting CVE-2026-21589, a critical arbitrary file access flaw…

Read more →

OpenAI is facing separate legal challenges over how ChatGPT interacts with children. The Guardian reports that eight US states accuse the company of misleading parents about the chatbot’s safety and exposing vulnerable users to dangerous conversations. Separately, CNET reports that a mother suing on behalf of her two children alleges that OpenAI collected and used…

Read more →

Organizations running self-hosted BeyondTrust Remote Support should treat exposed appliances as potentially compromised after a suspected Chinese espionage group exploited a critical zero-day to gain root control, access credential vaults, and establish footholds for lateral movement, according to Mandiant and Google Threat Intelligence Group. “Organizations should prepare for potential widespread exploitation following this disclosure,” Google…

Read more →

The suspected PRC-aligned group Armory Castle has been observed exploiting the newly disclosed flaw for long-term persistence

Read more →

The Burger King Japan data breach occurred between October 2 and 7, exposing emails, birth dates and other…

Read more →

Citizen Lab confirms that zero-click spyware infected Al Jazeera devices through targeted ads. Its investigation also exposes Discover-Tech’s global profiling and surveillance infrastructure.

Read more →

Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source for Arch Linux and related distributions, hosting user-submitted build scripts for proprietary programs, beta builds and older software versions…

Read more →

Widgets, widgets, widgets. Has there ever been an Android feature so full of promise that went unloved by Google for so very long? Okay, so maybe there has been — erm, lots of times, actually. But even so, Android’s widgets system is a perfect example of an exceptional advantage that Google basically buried, abandoned, and…

Read more →

Mozilla’s Firefox 158 patches 77 security vulnerabilities, including sandbox escapes, privilege escalation, and memory-safety flaws. Here’s what security teams need to know and which versions require updating.

Read more →

AI agents inserting themselves between businesses and customers pose challenges for e-commerce players caught in the middle.

Read more →

PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, evade detection inside FortiOS memory, and maintain stealthy access. PEERSTITCH, a stealthy implant deployed during a prolonged intrusion, helped attackers maintain access to a telecom managed service provider after compromising its FortiManager appliance. Palo Alto Networks Unit 42 documented the operation, which began in September 2024 and…

Read more →

Several services of the US Bankruptcy Noticing Center are unavailable due to a cyber incident affecting defense contractor BAE Systems

Read more →

Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against call-forwarding and screen-sharing scams. “With scams growing harder to spot, it’s nearly impossible for users to catch every red flag themselves. That’s why Android’s built-in defenses actively intercept these threats before they reach…

Read more →

Arctic Wolf is expanding its AI-powered security capabilities with new tools designed to stop cyberattacks earlier, identify unauthorized AI usage, and provide greater transparency into automated security operations. Announced at the company’s 2026 Security Operations Summit, the innovations include Aurora Adaptive Threat Protection, a new endpoint security offering; SwarmView, which provides visibility into AI-driven security…

Read more →

Microsoft says some users may have trouble turning on Smart App Control after installing this month’s KB5127648 Windows 11 security update. […]

Read more →

Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are calling for tougher rules and the establishment of a new international body overseeing best practice for AI development. In an open letter the AI specialists — 487, at time of publication, including many…

Read more →

Deeper Network Promo

Fresh research suggests recent panic over AI-generated malware may be overblown. Last month Anthropic detailed how Russia-linked cyberespionage group Midnight Blizzard used Claude to rebuild malware each time security tools flagged its backdoor as malign. “We observed GTG-20006 operate through customized AI-driven workflows that automated much of their operations from development, infrastructure acquisition, phishing, persistence…

Read more →

The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts. […]

Read more →

The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas. CenterPoint Energy is a regulated utility company used to deliver natural gas and electricity infrastructure, maintain power grids and pipelines, and restore service across parts of Texas, Indiana, Ohio, and Minnesota. The organization…

Read more →

Cloud Gaming Is Expanding How Players Access PC Gaming For many years, the world of PC gaming operated on a simple basis: buy a powerful computer, install the games and then…

Read more →

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could…

Read more →

Five years ago, cloud gaming in Australia was more of a proposition than reality. The idea was compelling: stream your PC games from powerful data centre hardware to almost any…

Read more →

AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations detected the unauthorized access. After internal reviews, the AI companies whose models were being tested

Read more →

BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. […]

Read more →

David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a cohort works, with weekly sessions, homework and measurements at the start and end. He explains how the group handled settings that…

Read more →

US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job data provider JobSpikr, removed duplicates and sorted each one by the security work it described. The postings…

Read more →

A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across thousands of posts on 16 underground forums from February through August 2026. Over that window, mentions…

Read more →

A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a

Read more →

More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report. Large attacks and distributed targeting strain defenses Attacks exceeding 1 Tbps or 1 Gpps increased 1,286% year over year. Much of that growth came from…

Read more →

Here’s a look at the most interesting products from the past week, featuring releases from NinjaOne, Qualys, Scytale, and SolarWinds. NinjaOne combines Katana AI and MCP server to accelerate IT problem resolution NinjaOne has announced Katana AI, an agentic AI technician that supports and elevates IT workers, and the NinjaOne MCP server, an agentic orchestration…

Read more →

Fastfetch is a system information tool written mainly in C that runs on Linux, macOS, Windows 8.1 and later, Android and several BSDs. The fastfetch project removed QuickJS scripting and changed what its Disk, Command and Shell modules report in version 2.70.0, released October 14. Configs written for older versions may print different values or…

Read more →

HPE’s EVP, president and GM of networking argues that the real test of AI is a better experience for users and less firefighting for IT teams. Bringing Aruba and Juniper…

Read more →

In Part 1, I looked at how Workday has swapped “your copilot, not your autopilot” for autopilot agents that keep humans in the loop. I also looked at how Workday President,…

Read more →

For the first wave of generative AI, the industry had a reassuring line ready for nervous workers. AI was “your copilot, not your autopilot.” Microsoft choosing “Copilot” as…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

A dossier prepared by search firm Korn Ferry reveals candid, and at times controversial, ways recruiters assess contenders for top jobs

Read more →

If the Innovation Keynote was Workday telling, the Community Day keynote was customers showing. And then a Wharton professor walked on stage and told the crowd that none of us,…

Read more →

The sports car will test America’s appetite for high-end electric sports cars—and Tesla’s own thesis.

Read more →

– Nokia is the first vendor with a 16-port line card solution that supports GPON, 10G, 25G and 50G PON on every port, enabling operators to evolve their networks with greater…

Read more →

That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking your movements and collecting your data, without you having to do a thing. This “zero-click mercenary spyware,” dubbed “AdFection,” is increasingly exploiting a sprawling online advertising ecosystem ripe for abuse, according to researchers at The…

Read more →

That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking your movements and collecting your data, without you having to do a thing. This “zero-click mercenary spyware,” dubbed “AdFection,” is increasingly exploiting a sprawling online advertising ecosystem ripe for abuse, according to researchers at The…

Read more →

Combination creates a new cybersecurity powerhouse to deliver a complete security platform that protects against AI-accelerated threats and data risks

Read more →

Safety incidents risk exposing AI developers to multibillion-dollar liabilities, with other businesses vulnerable for using the tech.

Read more →

I believe the cybersecurity industry may be approaching AI security the wrong way. AI agents are becoming more powerful every day. Systems like ChatGPT, Claude, and Grok can write and execute code, use command shells, browse the web, call APIs, interact with MCP servers, and access enterprise data. Yet much of the industry is taking…

Read more →

Australian organisations are increasingly adopting AI, but scaling it beyond pilot programs remains a significant challenge. In this Q&A, Kumaran C R, Vice President and…

Read more →