(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

There’s a lot to love in the new Cricut Maker 5, but my wife’s favourite improvement is something she appreciates before she even switches it on: it fits on her desk.

Read more →

Artificial intelligence AI is moving into a new phase in Australian organisations. Until recently, the security conversation largely focused on how employees use generative AI…

Read more →

Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. […]

Read more →

Some downloads of the Rank Math PRO WordPress plugin from the vendor’s official website carried malware that planted hidden backdoors in a supply-chain attack last week. […]

Read more →

A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.

Read more →

Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.

Read more →

Finding security weaknesses is only part of the job for MSPs. Customers also need to know which gaps attackers could actually exploit. Horizon3 announced Oct. 16 that it is expanding its Pax8 partnership across Europe, making the NodeZero autonomous penetration testing platform available to more managed service providers through the distributor’s marketplace. For MSPs, the…

Read more →

Hackers reportedly compromised AOMEI’s servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a […]

Read more →

New ISACA research finds women report strong career momentum but are less likely than men to feel they have authority over key business decisions.

Read more →

Sydney-based AI optimization provider Aionix has appointed former Pia executive Nic Ferraro as chief growth officer, tasking him with expanding the company’s managed service provider (MSP) partner business internationally and helping partners build recurring revenue from AI governance services. Ferraro, who previously held COO, CRO, and chief growth officer roles at MSP automation company Pia,…

Read more →

Anthropic has proposed dedicating company shares to a public benefit fund that could address AI’s economic fallout, raising questions for channel partners about how vendors will support workers affected by the technology. The Claude developer announced Sunday that it plans to commit 5% of its shares to the Anthropic Public Benefit Fund, subject to stockholder…

Read more →

Microsoft’s plan to anchor a major UK AI data center has run into a problem that money and GPUs cannot quickly solve: grid access. The company has terminated its agreement for Nscale’s planned Loughton, Essex, facility after expected power availability slipped into the 2030s. The setback puts a spotlight on a growing infrastructure challenge for…

Read more →

Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. […]

Read more →

Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is designed to make movies, music, and other media available across devices. But when a server is exposed to the internet and runs vulnerable software, it can become an entry point for attackers who…

Read more →

Hundreds of federal agencies should adopt an encryption tool to protect whistleblowers, veterans suffering from mental health crises and others from hackers who might target them when they reach out via agency websites, Sen. Ron Wyden said Monday. The Oregon Democrat urged the Cybersecurity and Infrastructure Security Agency and Office of Management and Budget to…

Read more →

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell. The vulnerabilities

Read more →

The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. […]

Read more →

In a detention filing, prosecutors argue Abdulrahman Alfozan is a flight risk, saying his wife and child moved permanently to Saudi Arabia.

Read more →

A name from the past is emerging again to help you stay out of sight of surveillance cameras.

Read more →

Executives are saving just 16 minutes per week using artificial intelligence after accounting for the time spent reviewing AI-generated work, according to new research from Foxit, raising questions about whether businesses are realizing meaningful productivity gains from their AI investments. The secure PDF software company surveyed approximately 1,400 executives and end users for its AI…

Read more →

Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations.

Read more →

Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site that installed and activated one…

Read more →

Microsoft offers a registry workaround for Exchange email disruptions after Windows Server updates. Learn the symptoms and what administrators should check.

Read more →

OpenCode says its Console breach affected 1.4% of users and may have exposed AI API keys. See which providers responded and what security teams should check.

Read more →

An OpenAI research agent used test crypto without permission and omitted the spending from its report, highlighting gaps in authorization and oversight.

Read more →

US cybersecurity job postings fell 26.4% through September 2026 as AI roles grew. Learn what the shift means for security staffing and human oversight.

Read more →

Burger King Japan confirms a breach involving 11.18 million membership records, exposing personal information and raising concerns about phishing and data security.

Read more →

An enterprise environment emits events by the million every hour. During an incident, the responder rarely needs all of them. They need the few hundred that tell the story: the burst of 4625 failures followed by a single 4624 success, the encoded PowerShell spawned by winword.exe, the new service installed at 03:12 on a domain…

Read more →

The Department of Homeland Security is banning the use of Chinese AI model DeepSeek and its affiliates by civilian federal agencies. The notice, set to publish Tuesday in the Federal Register, cites the Federal Acquisition Supply Chain Act and a review by the Federal Acquisition Security Council to bar federal agencies from buying all information…

Read more →

Deeper Network Promo

Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report

Read more →

Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about how they are adopting and implementing artificial intelligence (AI) into their organizations.  

Read more →

Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010). […]

Read more →

For the latest discoveries in cyber research for the week of 19th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES CenterPoint Energy, a US utility company serving Texas and several other states, has disclosed a data breach affecting more than 1 million Texas residents. Unauthorized access to an external system exposed names,…

Read more →

Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard’s Greg Pollock explains what universities, government websites, and security teams need to think about next.

Read more →

The Google Threat Intelligence Group (GTIG) reports that attackers compromised AOMEI Technology’s update and notification infrastructure in a campaign investigated between April and July. AOMEI Backupper is backup software that the company says is used by more than 100 million people worldwide. It lets users back up files, copy entire drives, and recover data if…

Read more →

The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm

Read more →

The worst problems don’t always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done. This week had plenty of that. Trusted connections became a problem. Hardware wasn’t as safe…

Read more →

Anthropic’s anticipated $2 trillion IPO valuation is facing a reality check as slowing revenue growth raises questions about how much investors are willing to pay for the AI company’s future. Some existing and prospective investors are considering a valuation closer to $1.5 trillion ahead of its reported November stock market debut, Reuters reported, citing four…

Read more →

Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these underground services operate and the techniques used to create and maintain fraudulent verified accounts. […]

Read more →

An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.

Read more →

F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems. […]

Read more →

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters…

Read more →

San Rafael, United States, 19th October 2026, CyberNewswire

Read more →

Axonius has announced Axonius AI Workforce, the latest expansion of Axonius AI. It enables organizations to deploy teams of Virtual Workers that monitor their environments, identify high-risk exposures and assets that deviate from their expected state, remediate issues, and report progress toward assigned goals. Actions requiring human-in-the-loop (HITL) approval pass through a structured checkpoint for…

Read more →

American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ Microsoft 365 accounts. The intruders used a compromised credential belonging to the ConnectWise Cloud Backup application, formerly known as SkyKick. This spurred the company to temporarily suspend the backup service, as…

Read more →

Meta wants the right to scrape your website for AI training. If you have a business account, that includes you. At the end of the month, Meta plans to change its commercial terms in a way that matters to every company advertising or selling through its platforms. The new language takes effect on October 30,…

Read more →

A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users

Read more →

Sweet Security has announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific vulnerabilities the moment they are identified. Security teams can enforce protection in one click while engineering develops, tests, and deploys a permanent fix. Vulnerability remediation can take days or weeks as engineering teams develop…

Read more →

A single support ticket can send an MSP technician through several tools before the actual fix begins. In an Oct. 14 update, GoTo outlined LogMeIn Resolve enhancements shipped during 2026 for managed service providers (MSPs), including AI-assisted support, customer-specific management, and expanded integrations For MSPs, the question is whether these capabilities lower the cost of…

Read more →

Discover how to secure AI agents in your cloud environment with Tenable One Cloud Exposure. We explore Microsoft Entra Agent ID and provide essential best practices for robust agentic AI identity security. Key takeaways Understand your current maturity level and then build an appropriate action plan to secure your agent identities. Use your cloud providers’…

Read more →

Dell and Microsoft are bringing Nvidia-powered AI laptops to market, giving enterprise buyers two premium options for running demanding AI workloads locally. Dell’s XPS 16 Creator Edition is listed at $3,799.99 through Best Buy, while Microsoft’s Surface Laptop Ultra starts at $2,599.99 for consumers and $2,749.99 for business customers. These prices reflect different configurations and…

Read more →

The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps

Read more →

SiteGuard Server Edition CVE-2026-106931 is under active exploitation. Administrators should preserve diagnostic evidence before patching because remediation may erase attack traces.

Read more →

The recent disclosure of a major vulnerability in Citrix NetScaler pointed to a widespread weak point: a login page is an attack surface that can be used to compromise and access an application server. Indeed, the disclosures included an actively exploited flaw that allowed attackers to execute commands on affected gateways without signing in. As with any emergency patch,…

Read more →

Plus, an Nvidia-backed startup’s new category of AI to cut compute costs.

Read more →

Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users. […]

Read more →

UK officials found 250,000 older legal aid records among data stolen in a 2025 cyberattack, including files dating to 1978 and probation information.

Read more →

Microsoft and Nvidia are urging enterprises to assess the security of open-weight AI models throughout deployment, warning that changes to model weights and configurations can weaken safeguards even when a model retains its ability to perform assigned tasks. In a joint paper published last week, the companies identified 30 risk types across five categories and…

Read more →

Anthropic’s revenue is climbing rapidly, but the AI company’s latest figures suggest its growth is beginning to slow ahead of a potentially historic IPO. The Claude developer reported a quarterly revenue figure of $16.8 billion for the third quarter, up from $11.6 billion in the previous quarter, according to Bloomberg. The increase comes as Anthropic…

Read more →

In this post, I will talk about portable charger and how to choose the best option for travel and everyday use. Smartphones, tablets, wireless earbuds, and other electronic devices play an important role in modern life. Whether you use your phone for navigation, communication, work, or entertainment, keeping its battery charged is essential. However, finding…

Read more →

This week on the Lock and Code podcast… At just 17 years old, Jordan DeMay was murdered by strangers online. That’s how Jordan’s father, John DeMay, described what happened to his son four years ago. At home in Michigan, Jordan was readying for a weekend trip when he received a friend request on Instagram. The…

Read more →

More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new…

Read more →

ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments after a credential tied to its Cloud Backup platform was compromised and used to authenticate into customer tenants, prompting Huntress to identify suspicious sign-ins across 162 organizations. The activity involved the Cloud Backup application obtaining Microsoft Graph access tokens…

Read more →

Deeper Network Promo

The company, co-founded by Mobileye CEO Amnon Shashua, says it slashed one early customer’s compute costs by 67%.

Read more →

In olden days — last year, say — employees using unsanctioned AI tools might copy-and-paste sensitive data that could end up in the AI company’s training data set. Today, an unsanctioned AI can hack into another company for an employee even if they didn’t explicitly ask it to. This doesn’t just mean the latest unreleased…

Read more →

Residential procurement is often presented as a sequence of purchases: select the building package, choose finishes, order equipment, and arrange delivery. In practice, the difficult questions usually concern how those purchases connect. An omitted fitting, unclear installation responsibility, or incompatible replacement can create problems disproportionate to its price. A useful procurement process therefore checks scope,…

Read more →

The UK Electoral Commission is building an AI system to alert candidates to damaging deepfakes within three hours. The UK’s Electoral Commission is building an AI-powered system to tell candidates about significant deepfakes within three hours of posting. Its chief executive, Vijay Rangarajan, said so at a panel at the Conservative Party’s annual conference last…

Read more →

In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data into the agent’s prompt. Separately, Email-to-Case and Web-to-Case turn inbound customer messages into case records; it is how airlines and hotels run support intake. Both…

Read more →

Four months ago, Ramp was worth $44 billion. Now it’s worth $60 billion. The New York-based financial technology company announced a new funding round on Oct. 15, led by Dragoneer Investment Group, as its annualized revenue surpassed $2 billion. The valuation represents a roughly 36% increase from its previous funding round. The investment comes as…

Read more →

Personal information belonging to millions of current and former California public school students has been stolen from a system operated by Educational Testing Service (ETS). ETS is a nonprofit organization that helps run the state’s standardized tests under contract with the California Department of Education (CDE). It has begun notifying students and families after an…

Read more →

Cork Cyber is expanding its automated vulnerability remediation capabilities for managed service providers (MSPs), reporting more than 50,000 remediation runs across approximately 250,000 devices since launching the technology in September. The company says its platform can automatically resolve 64% of open software vulnerabilities, helping MSP partners reclaim approximately 5,100 technician hours that would otherwise be…

Read more →

Organizations that run open-weight AI models on their own infrastructure may have to supply safety and security controls that an AI provider would otherwise handle for them, Microsoft and NVIDIA warn in a joint paper on managing the risks of these models. Open-weight models are AI models whose weights, the values a model learns during…

Read more →

The world’s richest person made the announcement following similar pledges by Anthropic and other high-profile tech names.

Read more →

OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit and write-up this week for a local privilege escalation on OpenBSD 7.9 that chains two separate kernel flaws, one of them a 37-year-old integer overflow inherited from…

Read more →

Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client environments via stolen tokens

Read more →

OpenAI disclosed that an internal AI model hacked a crypto wallet and spent Sepolia test ETH without permission…

Read more →

A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits. “The tools delivered information-stealing malware and backdoors for macOS and Windows machines,” Elastic

Read more →

As global governments and tech giants reckon with widespread of revelations of autonomous AI agents unexpectedly breaking into computer systems, documents obtained by The Intercept show the U.S. Army is looking to harness that exact technology to seek and destroy. Army Cyber Command is developing a platform to turn AI agents into autonomous weapons that…

Read more →

Spyware has been detected on devices used by some of Serbia’s most prominent figures connected to the country’s political upheaval, according to researchers who announced their findings Monday. Vladan Ðokić, the rector of the University of Belgrade and prominent figure in the country’s student protest moment, and Rade Bajić, a lawyer with Serbia’s Public Prosecutor’s…

Read more →

CyberSN observed a particularly big dip in cybersecurity leadership positions such as CISO and Cybersecurity Director in 2026 compared to 2025

Read more →

Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point Research in the third quarter of 2026, up from 23% in the previous quarter and roughly four times the share of any other brand. Top 10 most impersonated brands in phishing attacks (Source: Check Point) Apple and Google followed with 8% each. Dropbox…

Read more →

Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both SaaS Security and Cloud Management offline over the weekend after discovering that unknown attackers had obtained unauthorized access to seven of its application identities. The company discovered the incident…

Read more →

Ask your infrastructure lead who owns the service account behind the overnight finance batch and notice how long the answer takes. In many of the environments I’ve reviewed, the engineer who set it up left years ago and the password has been sitting in a vault, or sometimes a plain config file, ever since. It…

Read more →

Microsoft has confirmed that this month’s Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems. […]

Read more →

Malware is evolving rapidly, driven by advances in AI and changes in computing infrastructures. Security professionals must continuously educate themselves on these trends to defend against increasingly sophisticated threats. The traditional game of cat and mouse between security attackers and defenders has got fiercer with fresh techniques evolving and older less effective approaches falling out…

Read more →

Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an OS command injection bug in SiteGuard Server Edition. Threat actors are already exploiting it in the wild. A successful exploit lets them run commands with root or SYSTEM…

Read more →

Last week on Malwarebytes Labs: Eiliko robot companion exposes private chats and can be hijacked “Spray and pray” job applications could make it harder for you to spot a scam OpenAI sued over children safety and data use Update Chrome: Google fixes 37 security flaws, including seven critical bugs Is this link safe? Find out…

Read more →

I have this sense that we’ve passed the point where “vibe coding” is a derogatory term. I have no empirical evidence for this; it’s more a feeling that those weaponising the term have now accepted the inevitability and are just getting with the program. Or they’ve reskilled into other industries because, let’s face it: you…

Read more →

A graded rookie card can be worth more than the laptop used to track it. Yet many collectors still manage five-figure collections with a shoebox and a spreadsheet they last…

Read more →

Enterprise AI now runs revenue-critical workflows. Before you integrate a new platform, one question matters: does the vendor hold a current SOC 2 Type II report that names the…

Read more →

A flaw in Broadcom’s Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working against home gateways supplied by three Belgian internet providers, in one case reading the Wi-Fi password…

Read more →

An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode’s optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key…

Read more →

Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the sensitive data they touch. SAST means the tool reads code without running it. Organizations can use it freely, with a license restriction covered below. Bearer’s complaint is that SAST tools can hand developers…

Read more →