Picture a composite case drawn from documented scams where a tech professional spends forty minutes on a video…

Read more →

Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data centers. […]

Read more →

When VergeIO’s new CEO sat down in front of journalists from four continents in Palo Alto, he summed up his reason for being there in one line. “We thought the market was…

Read more →

If you’ve ever looked at a list of cybersecurity jobs and felt like none of them fit you, you might just be looking at a short list. Most career guides cover the same few roles, like the analyst watching alerts or the pen tester (penetration tester, someone hired to legally break into systems to find…

Read more →

Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as “critical.” Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-96951 is a security feature bypass vulnerability that affects Windows Shell. The shared…

Read more →

Anthropic’s latest study combined IoT and network tests to explore AI self-replication, which researchers said would be “challenging” to shut down.

Read more →

There is a storeroom in almost every growing company with a stack of laptops nobody ordered on purpose. Someone needed machines in a hurry, a vendor had stock, and the purchase…

Read more →

Today is Microsoft’s October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. […]

Read more →

Microsoft released the Windows 10 KB5126657 extended security update, which includes this month’s record-breaking October 2026 Patch Tuesday fixes and a few bug fixes and changes. […]

Read more →

Character Technologies, the company behind chatbot platform Character.AI, filed for Chapter 11 bankruptcy protection Oct. 12 in the US Bankruptcy Court for the District of Delaware, announcing a proposed $20 million intellectual property licensing agreement with Disney Worldwide Services. The company entered bankruptcy with an agreement under which Disney Worldwide Services would pay $20 million…

Read more →

Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today’s patch Tuesday, and one is already exploited. CVE-2026-96951: An already exploited Windows Shell Security Feature Bypass Vulnerability. This vulnerabliity allows bypassing the “Mark of the Web” making it…

Read more →

The Federal Trade Commission is asking a court to force the owner of multiple digital security and privacy companies from further operations, saying the businesses are serially defrauding their customers out of millions of dollars. Earlier this month, the FTC filed a federal lawsuit in Ohio against Dmitry Belkin and 12 of his businesses, alleging…

Read more →

Microsoft announced today that devices running Windows 11 24H2 Home and Pro editions have reached the end of support and will no longer receive monthly security and non-security preview updates. […]

Read more →

Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic. The frontier AI lab said small AI models could form autonomous, self-propagating worm botnets that are “challenging to shut down,” since “there’s no centralized…

Read more →

The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday. […]

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Ivanti Connect Secure FortiMail flaw, tracked as CVE-2026-104935 (CVSS score of 8.6), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is an authentication bypass issue caused by…

Read more →

A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal account into an organization, Docker…

Read more →

The emerging industry has the potential to serve the U.S. military while providing Taiwan with an arsenal that it sees as essential to its survival.

Read more →

Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs and add new features. […]

Read more →

An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to “act immediately.” A fix for the third is still pending, according to Volexity.…

Read more →

The move is a turning point in the developer’s relationship with AI and Linux.

Read more →

A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP’s official Python client for BTP services. An attacker must be able to control…

Read more →

Compare the best NinjaOne Alternatives for endpoint management, patch management, remote monitoring, IT automation and MSP security workflows.

Read more →

A GPU waiting for data still draws full power. DDN has built its entire pitch around that one uncomfortable fact, and with bookings growing threefold, a rebuilt executive team…

Read more →

…To Close The Loop Between Product Design And Frontline Maintenance.

Read more →

It just got a whole lot easier to vibe code the exact Android app you need – no developer experience required.

Read more →

Apple has finally has a dedicated smart display. It’s called Apple HomeView, it has a 7-inch screen sitting on a speaker, it knows your face, and in Australia it costs RRP…

Read more →

TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. […]

Read more →

GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user’s package without having to steal their credentials. “Your configuration becomes validated and exempt from expiry after its first successful publish,” the…

Read more →

A joint international law enforcement and industry operation against scammers netted 28 arrests, rescued 117 trafficking victims and led to the takedown of more than 3.7 million accounts, the Justice Department announced Tuesday. The crackdown, billed as “Joint Disruption Week,” focused on West Africa and also identified more than $11 million in freezable funds and…

Read more →

Read more →

Plus, Meta releases a new model it says it cutting-edge, and OpenAI may be closing the gap with Anthropic.

Read more →

Bitdefender and Sophos offer strong endpoint protection, with Bitdefender emphasizing risk reduction and Sophos broader security integrations.

Read more →

Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockchain ClickFix…

Read more →

Deeper Network Promo

Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. […]

Read more →

Apple’s “Welcome Home” event featured all the new smart home hardware coming to the Apple lineup.

Read more →

HomePod mini 2 is here, and there are four major upgrades that separate it from the first generation.

Read more →

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT). […]

Read more →

Learn how Cisco’s Secure Development Lifecycle (CSDL) is evolving to support AI-driven development, ensuring secure and resilient software at speed.

Read more →

  We are pleased to welcome the newest organizations that have joined as Associate Participating Organizations of the PCI Security Standards Council (PCI SSC). These organizations play a crucial role in supporting the evolution of the PCI security standards and programs and promoting the implementation of PCI security standards worldwide to protect payment data. We…

Read more →

When Workday acquired Sana just about a year ago, it said that the combination of Sana’s AI with Workday’s platform would create a new “front door” to work. Today at its Workday Rising conference, it unveiled that front door, turning Sana into Workday’s default home screen that, it said, “brings tasks, decisions, meetings, and agent…

Read more →

As an Apple Home user, here’s what stands out about Apple’s new smart home hub – and what I want to test firsthand.

Read more →

TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from a missing authorization check on the /config/update endpoint, which allowed any authenticated user (including low-privileged accounts) to modify the…

Read more →

Anthropic researchers show how small AI models could autonomously replicate across IoT devices, raising concerns about adaptive, AI-powered botnets. Anthropic published a paper this week that should make anyone who manages IoT infrastructure sit down for a moment. The research shows that small AI models are approaching the capability to replicate themselves autonomously across networks…

Read more →

Authors: Yun Zheng Hu Introduction Today Fox-IT is publicly releasing its full Cobalt Strike Beacon Corpus, containing 56,843 raw beacons and their parsed configurations, from 190,182 sightings collected from 30,604 unique IP addresses running a Team Server (the Cobalt Strike command-and-control server that beacons connect back to) between 4 July 2018 and 29 September 2026,…

Read more →

New API enables developers to extract structured content, discover website pages, and perform bounded crawling, all within the SerpApi workflow

Read more →

Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn’t enough and how organizations can close these authentication gaps. […]

Read more →

Several Europe-based retail firms have confirmed experiencing cyber incidents, while H&M said it is “investigating” such claims

Read more →

SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. […]

Read more →

GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical security flaw, tracked as CVE-2026-97229 (CVSS score of 10.0), that could let attackers run code on its servers without logging in. The flaw affects Community Edition (CE) and…

Read more →

Trellix has announced Trellix Wise for Private Cloud, an on-premises, federated AI core for agentic security operations. The solution extends a security fabric across an organization’s existing infrastructure to improve threat detection and response while preserving data sovereignty, governance, and predictable costs. “The threat landscape has fundamentally shifted, where AI isn’t just accelerating attacks; it’s…

Read more →

Flashpoint research suggests that only 25% of security teams have actively deployed AI, with many concerned about AI Agents’ negative impact

Read more →

Plus, Meta’s new model.

Read more →

NinjaOne has announced Katana AI, an agentic AI technician that supports and elevates IT workers, and the NinjaOne MCP server, an agentic orchestration connector that extends the platform’s governed access to the AI tools teams already use. “Modern IT environments generate more data than any technician can process,” said Phil Hochmuth, research VP, endpoint management…

Read more →

Russian tech giant Yandex confirmed that drones hit three of its data centers, shutting down the facilities in Sasovo and Vladimir and knocking out part of the infrastructure in Kaluga. On October 11, Yandex Cloud told its customers that the platform was running in emergency mode and advised them to switch to their own disaster…

Read more →

The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying ​Grindr users’ sensitive data to advertisers. The administrative penalty is the largest issued by the data protection watchdog, arguing the case merited a high fine because of the “very serious” nature of the…

Read more →

Lattice Semiconductor has released version 5.0 of its Lattice Sentry solution stack, adding post-quantum cryptography (PQC) to its platform firmware resilience (PFR) and attestation capabilities. The update provides CNSA 2.0-aligned, NIST-compliant protection for AI data centers and critical infrastructure, giving system designers a validated, production-ready approach to quantum-resistant security. “AI infrastructure and the threat landscape…

Read more →

Norway’s privacy regulator Datatilsynet has fined advertising technology company Xandr 92 million Norwegian kroner, approximately $9.6 million, for unlawfully processing and sharing sensitive information about Grindr users. While the decision concerns users in Norway, the data-sharing practices were not confined to Norwegian users. BleepingComputer reports that information about Grindr users in other countries was also…

Read more →

Torrance, California, 13th October 2026, CyberNewswire

Read more →

Critical infrastructure faces mounting threats from nation-state groups and AI-driven attacks. In the latest installment of our Cybersecurity Awareness Month blog series, learn how leading cybersecurity agencies, such as CISA, are advising critical infrastructure organizations on ways to protect themselves and the essential services they provide. Key takeaways Critical infrastructure organizations often struggle with asset…

Read more →

HomeView is a square-shaped screen for smart home control, hands-free FaceTime calls and access to Siri AI.

Read more →

Lemongrass is expanding its role in SAP’s enterprise AI ecosystem, with 24 AI agents now accounting for nearly one in five partner agents listed in SAP Discovery Center, as demand for AI tools that automate real-world business workflows grows. The SAP-focused cloud transformation provider announced the milestone on October 13, positioning its portfolio as a…

Read more →

Nearly nine in 10 organizations have experienced an AI-related incident, but many remain unprepared to respond effectively, according to new research from CYGNVS and Marsh Risk. The CYGNVS Resilience Benchmark Report, released October 13, analyzed more than 9,500 survey responses collected between January 2023 and September 2026 across 21 industries in Asia, Europe and North…

Read more →

HomeView is a square-shaped screen for smart home control, hands-free FaceTime calls and access to Siri AI.

Read more →

Ridge Security has announced RidgeOne, a self-contained solution that brings autonomous AI-powered penetration testing and agentic red teaming to mid-sized organizations. Combining Ridge Security’s RidgeGen agentic security validation platform with an open-weight AI model running on NVIDIA DGX Spark, RidgeOne enables organizations to perform deep security testing within their own environment without sending sensitive testing…

Read more →

Samsung’s Galaxy S26 was hacked seven times at Pwn2Own Ireland 2026. Here’s what the final results reveal about vulnerabilities and security updates.

Read more →

As Research Exposes Growing Gap Between Factory Floor And Boardroom

Read more →

The dangerous part of a stolen identity isn’t always the initial login. It’s what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate. A compromised account that looks legitimate at first could become the starting…

Read more →

Another European move toward digital sovereignty has curtailed adopting the US workplace suite.

Read more →

Deeper Network Promo

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

Read more →

GitLab just fixed a max-severity vulnerability that could allow unauthenticated attackers to execute arbitrary code on its servers. The company released a fix on Monday, alongside patches for five other high-severity flaws affecting its source code management and continuous integration and delivery (CI/CD) platform. The vulnerability, tracked as CVE-2026-97229, was fixed in versions 19.4.2, 19.3.5,…

Read more →

The FBI seized seven domains linked to Flax Typhoon hacking tools. Learn why the threat may persist and what security teams should check for compromise.

Read more →

Microsoft has launched Decision-1, an AI model that returns probabilities for predefined answers, allowing software applications to use its outputs directly instead of processing a free-form response from a large language model (LLM). The model targets tasks such as classifying requests, prioritizing incidents, and checking AI-generated responses. Microsoft says it can handle these decisions with…

Read more →

Mozilla’s Firefox Enterprise is a paid platform that lets organizations control how sensitive data is shared, check device security, and manage employee access to web applications. The platform pairs the browser with a management dashboard hosted on an organization’s own infrastructure. IT teams can set policies across their workforce, restrict AI tools, and connect browser…

Read more →

A cyberattack has forced hundreds of supermarkets across France to throw away refrigerated and frozen food after attackers interfered with the systems that keep it cold. The attack caused significant financial losses and food waste. Some installations reportedly reached temperatures of around 50°C (122°F), with damaged equipment and reports of fires adding to the disruption.…

Read more →

Three vulnerabilities in LG’s webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The chain was tested on two TV models,…

Read more →

I remember the name of that AI doco now – The AI Doc: Or How I Became an Apocaloptimist. I was watching it on the long-haul flight home the other day, and what I found particularly engrossing was the polar-opposite opinions from a bunch of people: “it’s gonna kill us all” versus “it’s gonna make…

Read more →

The world is advancing toward a future in which over 10 billion humans coexist with trillions of autonomous agents in a superintelligent universe. But as AI becomes more intelligent, humanity is being divided into those who can access intelligent tools and those who will remain isolated from one of the greatest technological revolutions in decades.…

Read more →

A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list. Someone downloads a local model runtime, a program that runs models directly on the machine instead of sending data to an…

Read more →

A four-year-old Arm Mali GPU vulnerability can be used to root the third-generation Amazon Fire TV Cube, but…

Read more →

A flaw in npm’s Trusted Publishing mechanism could allow attackers to hijack legitimate software packages by reclaiming abandoned GitHub repository names, potentially exposing millions of package downloads to supply-chain attacks. Researchers at Boom Security identified more than 1500 potentially vulnerable npm packages, including security scanners, authentication tools, and cryptographic packages. The vulnerability, dubbed SlugFest, came…

Read more →

Mitel has introduced Mitel Workforce Experience (WX), a new application framework that combines enterprise voice, messaging, meetings, contact center capabilities, and AI-assisted workflows into a unified interface. The platform’s support for hybrid, private cloud, and on-premises deployments could create opportunities for MSPs and channel partners to help customers consolidate fragmented communications systems while addressing industry-specific…

Read more →

The best cybersecurity solutions for MSPs include Acronis, NinjaOne, Bitdefender, Sophos, and ESET for protecting and managing customer environments.

Read more →

The government is planning tweaks to legislation, new incident response and more to head of AI security threats

Read more →

Every day, thousands of SOC and IR teams worldwide analyze suspicious files, emails, and links with ANY.RUN. Beyond individual investigations, this activity generates valuable data on emerging threats, industry trends, and SOC operational performance. Drawing on real-world investigations across thousands of organizations, ANY.RUN provides visibility into threats affecting different sectors, from banking to retail. Security…

Read more →

Meta’s Muse Wonder and Muse Wonder Full models are built for AI agents that handle tasks such as preparing insurance claims, reviewing leases and developing software. The models combine document analysis and tool use with the ability to retain relevant details across conversations and work through obstacles toward a user’s goal. Intended for commercial and…

Read more →

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. About CVE-2026-97229 CVE-2026-97229 is an integer overflow vulnerability in GitLab’s CI/CD Regular Expression Compiler, and it affects both GitLab Community Edition (CE) and Enterprise…

Read more →

For years, SOC Prime has focused on one core problem: curating behavioral detection rules that cover both the threats that never go away and the new ones that emerge every day. As agentic AI changes how security teams work, we see the same opportunity opening up in a new area — and we’re expanding our…

Read more →

Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a GitHub repository name the maintainer had left behind. Bloom counted more than 1,500 npm packages exposed this way, and GitHub, which owns npm, says it…

Read more →

Amsterdam, Netherlands, 13th October 2026, CyberNewswire

Read more →

Socura report claims CISOs are calling in sick or taking holiday to miss Patch Tuesday

Read more →

Park Place Technologies has expanded its Microsoft Azure Cloud Solution Provider (CSP) capabilities to the United States and Canada, extending its European cloud practice and broadening its managed services portfolio beyond traditional infrastructure support. Park Place expands Microsoft Azure CSP services to North America The provider offers a more direct, accountable path to Microsoft cloud…

Read more →

GitLab has released emergency security updates addressing CVE-2026-97229, a maximum-severity remote code execution vulnerability affecting GitLab Community Edition (CE) and Enterprise Edition (EE). The flaw has a CVSS score of 10.0 and could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable GitLab server under certain conditions. The vulnerability resides in GitLab’s…

Read more →

Zscaler has signed a distribution agreement with Malaysia-based LinkAxia Networks, expanding access to its Zero Trust Exchange security platform through the distributor’s partner network as the company targets growing cybersecurity demand in the country. For LinkAxia’s network of resellers and solution providers, the agreement expands access to Zscaler’s Zero Trust Exchange platform, creating opportunities to…

Read more →

Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that runs all of a store’s fridges and freezers, a device made by Danish company Danfoss…

Read more →

Two of 31 newly disclosed flaws in Progress Software’s MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0. Affected

Read more →

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. “GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression…

Read more →

The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build. Read more in my article on the Hot for Security blog.

Read more →

Voiceflex has brought AI-powered customer calling to its channel partners through a new white-label service. Called VoiceAI, the offering is available exclusively through the UK telecom carrier’s partner network. MSPs and resellers can sell it under their own brands alongside existing business communications services. For partners, the commercial opportunity will depend on how efficiently the…

Read more →