Geek Guy

8 eMudhra certificates are compromised. Here’s what you need to know

On October 19, 2026, at approximately 17:00 UTC, Cloudflare became aware that private keys associated with eight eMudhra intermediate certificates were compromised. These certificates were widely trusted by browsers, operating systems, and also within Cloudflare. Because the keys themselves are weak, an attacker can create a forged certificate for any domain and use it to impersonate servers…

Trust Hacked: What Firewalls, Failures, and the Frontlines Taught Me About Trust

In Trust Hacked, author Nia Luckey frames organizational trust as critical infrastructure rather than a soft skill. Drawing on military and cybersecurity concepts, the book introduces a strategic framework designed to build, maintain, and protect trust within modern leadership and corporate environments. The framework centers on three core pillars: authentication to verify leadership consistency, encryption…

Digital Momentum: Building Real Change-Ready Enterprises

Brice Ominski’s book, Digital Momentum, provides frameworks for leaders to construct change-ready enterprises through continuous evolution. The text positions enterprise architecture as essential infrastructure for bridging strategy and execution, emphasizing composable design patterns, ethical system boundaries, automated governance, and trust as a measurable operational metric. The review highlights the book’s practical approach to legacy modernization…

KVM escape exposes broader attack surface in Linux networking

Security researchers have found a critical flaw in the Linux kernel’s networking stack that can let attackers escape a KVM virtual machine and execute code on the host system. The weakness could also potentially let attackers compromise systems running other Linux-based virtualization and sandbox platforms. Tracked as CVE-2026-99999 and dubbed PwnEscape, the vulnerability was discovered…

EasyDMARC, GMO GlobalSign Partner on Email Authentication

EasyDMARC and GMO GlobalSign have formed a strategic partnership connecting email authentication management with verified brand certificates, creating opportunities for managed service providers (MSPs) to help customers strengthen domain security and maintain trusted email identities. Partnership connects DMARC enforcement with verified email identities EasyDMARC’s Email Trust Platform enables organizations to discover every service sending email…

Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme

A 40-year-old Nigerian national was sentenced to eight years in prison for running a years-long hacking, tax fraud and investment scheme, the Justice Department said Monday. Chukwuemeka Victor Amachukwu enriched himself from 2019 to 2023 by hacking into U.S.-based tax preparation businesses, filing false tax returns with federal and state authorities using identities stolen from…

The AI Model Supply Chain Crisis: A 2026 Security Audit Guide

AI model supply chains have become a primary target for malicious attacks, such as dataset poisoning and model weight manipulation. Because this ecosystem lacks standardized security frameworks, compliance standards, and vulnerability registries, organizations face severe operational and financial risks from unverified third-party models and untrusted datasets. To mitigate these risks, organizations must implement structured frameworks…

Nvidia Adds Cloud and Integration Partners to EBU Sovereign AI Push

European public service broadcasters’ adoption of AI is creating potential work for channel partners that can integrate new tools while preserving control over sensitive editorial data. At an event in Berlin on Oct. 19, NVIDIA announced an expanded collaboration with the European Broadcasting Union (EBU) on a sovereign AI framework for European public service broadcasters.…

Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign

Russian government-connected hackers compromised two defense firms and a law enforcement agency in North Atlantic Treaty Organization countries as part of an espionage campaign, Symantec researchers said in a blog post Tuesday. The infamous group behind hacks of the Democratic National Committee during the 2016 election cycle was behind the attacks that Symantec identified in…

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google’s Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the

ConnectWise customers hit by supply-chain attack linked to compromised API secret

A portion of ConnectWise’s customers have been adrift for days, and hundreds are compromised, as the company’s efforts to restore its Cloud Backup service remain underway with no confirmed timeline for when customers can regain access. The company temporarily shut down multiple services Saturday after a threat actor gained access to a highly sensitive credential…

Google Cloud Outage in London Disrupts Revolut Banking Services

Google Cloud’s London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud services went offline in the London region this morning, according to Google’s status page, and the disruption didn’t stay contained to infrastructure dashboards. BREAKING: Revolut’s app and cards have stopped working across Europe. Google Cloud’s…

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially

There’s only so much code: the rise in vulnerability numbers

Frontier AI models (like Mythos) are rapidly mining decades of technical debt across ubiquitous legacy libraries, driving monthly Microsoft Patch Tuesday vulnerability advisories up more than tenfold (reaching 1,415 this month). This volume is overwhelming open-source maintainers and putting pressure on the traditional 90-day coordinated disclosure model.  Despite a 105% year-over-year surge in CVEs, Known…

A Vulnerability in BeyondTrust Remote Support Could Allow for Arbitrary Upload of Files

A vulnerability has been discovered in BeyondTrust Remote Support that could allow for arbitrary upload of files. BeyondTrust Remote Support is an enterprise secure remote access solution that enables IT teams to securely access and troubleshoot remote endpoints. Successful exploitation of this vulnerability could allow a remote attacker to perform file operations on an affected…

The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations

Key Findings Antidetect browsers obscure the digital identity of their users, enabling a single operator to silently manage thousands of isolated accounts across multiple platforms (including Facebook, TikTok, Instagram, and YouTube), while evading detection systems that look for scams and coordinated inauthentic behavior. Threat actors abuse these platforms, taking over accounts and using them for…

Abstract links automated response actions directly to SIEM detection rules

Abstract has announced new AI SOC capabilities in its agentic SIEM: investigation, hunt, and triage powered by a combination of Abstract’s own trained and tuned models and frontier foundation models, and SOAR response capabilities with actions assigned directly to detection rules. The capabilities are built into the platform that already collects, routes, and detects on…

ThreatModeler NexusAI tracks architectural changes and proposes security updates

ThreatModeler has announced the launch of NexusAI, its new AI-powered threat modeling partner within the ThreatModeler Nexus platform. NexusAI helps enterprises automate more of the work involved in creating, analyzing, and maintaining threat models, enabling security teams to scale their impact without scaling manual effort. As AI accelerates application development, security teams face growing pressure…

NIS2 Explained: Requirements, Deadlines, and LogTotal Use Cases Across Europe

What Is NIS2? NIS2 is Directive (EU) 2022/2555, the EU’s baseline cybersecurity law for organizations that keep energy grids, water systems, hospitals, logistics chains, food supply and digital infrastructure running. It replaced the original NIS Directive (EU) 2016/1148 and turned a loosely applied, sector-by-sector regime into a single framework with common obligations, common reporting timelines…

Only 12% of MSPs Report Measurable AI Gains, Nerdio Finds

Nerdio’s recently released report shows that while MSPs are embracing AI, many are struggling to translate adoption into measurable business results. The 2026 State of the MSP Business Report is based on a survey of over 150 MSP decision-makers that manage Microsoft 365 (M365) and Azure across their customer bases. MSP AI adoption outpaces measurable…

Deeper Network Promo Deeper Network Promo Deeper Network Promo Image

Pegasus Spyware Infection Confirmed on Serbian University Rector’s iPhone Days Before Election

The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia’s student protest movement, was infected with NSO Group’s Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days before Serbia’s October 25 snap parliamentary election. The infection used a zero-click exploit, meaning Đokić did…

AppGate gives OT supervisors live monitoring and session termination controls

AppGate has expanded its zero trust offering for operational technology (OT) with Session Governance capabilities that help critical infrastructure operators reduce third-party access risk, simplify compliance audits and protect operational uptime. The expansion builds on the ZTNA for OT offering AppGate introduced in March 2026. The initial release of AppGate ZTNA for OT controlled who…

CVE-2026-110936: Siemens Software Center Flaw Exploited in ClickFix Attacks

Siemens has confirmed active exploitation of a high-severity DLL side-loading vulnerability in Siemens Software Center, a desktop application used to download, install, activate, and update Siemens software. Tracked as CVE-2026-110936 and rated 8.4 under CVSS v4.0, the flaw stems from an uncontrolled DLL search path and can lead to arbitrary code execution with the privileges…

Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign

Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center, the company’s tool for downloading, installing and managing its software. Siemens first published its security advisory on 15 October 2026, giving the flaw reported by Jose Oregon from Huntress Labs a CVSS v4.0 score of 8.4. On 17 October,…

Caylent CEO: AI Is Changing the IT Services Business

The traditional IT services business model is facing a fundamental shift as artificial intelligence changes how technology partners deliver projects, develop talent, and generate value for customers. For Caylent CEO Valerie Henderson, navigating that transformation requires more than introducing AI tools or launching new consulting offerings. It means reconsidering how a services business operates from…

Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader

The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization (NATO). The Symantec Threat Hunter Team, which is tracking the activity cluster under the moniker Swallowtail, involved the use of a backdoor called HOOKEDGE and…

ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident

ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resetting accounts and replacing application credentials, as it continues to respond to a security incident that led to unauthorized access to application identities associated with Cloud Backup. The company said it has completed the following actions since it began

AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive

A data breach exposed AfD emails, while an anonymous site published AI summaries of 421,000 messages, raising questions about authenticity and privacy. Germany’s Alternative für Deutschland (AfD) confirmed on October 19 that its hosting provider was hacked in September and that mailboxes were copied. By the time the confirmation reached Bild, a website called hexane.cc…

76% Faster Triage: How US SOCs Increase ROI Through Visibility and Automation

October marks Cybersecurity Awareness Month, a timely opportunity to look at how American organizations can strengthen their security operations. Among the biggest challenges SOC teams face is making sure they not only detect and investigate threats, but doing so quickly enough to make the right security decisions without overwhelming analysts or increasing operational costs. In…

Teradata expands AI data security with post-quantum protection and immutable backups

Teradata has announced new privacy, security, and resiliency capabilities designed to address one of the defining challenges of enterprise AI: how sensitive data is protected, who and what can access it, and whether it remains available and recoverable when something goes wrong. Teradata addresses all three through an integrated approach that reduces raw identity exposure,…