Plus: Big Tech is soft-launching data centers early and U.S. tariff pressure is prompting countries to tighten their forced-labor rules.

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Atlassian flaw, tracked as CVE-2026-21589 (CVSS score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog. In early October, threat actors started exploiting CVE-2026-21589, a critical arbitrary file access flaw…

Read more →

OpenAI is facing separate legal challenges over how ChatGPT interacts with children. The Guardian reports that eight US states accuse the company of misleading parents about the chatbot’s safety and exposing vulnerable users to dangerous conversations. Separately, CNET reports that a mother suing on behalf of her two children alleges that OpenAI collected and used…

Read more →

Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog.

Read more →

Organizations running self-hosted BeyondTrust Remote Support should treat exposed appliances as potentially compromised after a suspected Chinese espionage group exploited a critical zero-day to gain root control, access credential vaults, and establish footholds for lateral movement, according to Mandiant and Google Threat Intelligence Group. “Organizations should prepare for potential widespread exploitation following this disclosure,” Google…

Read more →

The suspected PRC-aligned group Armory Castle has been observed exploiting the newly disclosed flaw for long-term persistence

Read more →

The Burger King Japan data breach occurred between October 2 and 7, exposing emails, birth dates and other…

Read more →

Citizen Lab confirms that zero-click spyware infected Al Jazeera devices through targeted ads. Its investigation also exposes Discover-Tech’s global profiling and surveillance infrastructure.

Read more →

Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source for Arch Linux and related distributions, hosting user-submitted build scripts for proprietary programs, beta builds and older software versions…

Read more →

Widgets, widgets, widgets. Has there ever been an Android feature so full of promise that went unloved by Google for so very long? Okay, so maybe there has been — erm, lots of times, actually. But even so, Android’s widgets system is a perfect example of an exceptional advantage that Google basically buried, abandoned, and…

Read more →

Mozilla’s Firefox 158 patches 77 security vulnerabilities, including sandbox escapes, privilege escalation, and memory-safety flaws. Here’s what security teams need to know and which versions require updating.

Read more →

AI agents inserting themselves between businesses and customers pose challenges for e-commerce players caught in the middle.

Read more →

PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, evade detection inside FortiOS memory, and maintain stealthy access. PEERSTITCH, a stealthy implant deployed during a prolonged intrusion, helped attackers maintain access to a telecom managed service provider after compromising its FortiManager appliance. Palo Alto Networks Unit 42 documented the operation, which began in September 2024 and…

Read more →

Several services of the US Bankruptcy Noticing Center are unavailable due to a cyber incident affecting defense contractor BAE Systems

Read more →

If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious

Read more →

Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against call-forwarding and screen-sharing scams. “With scams growing harder to spot, it’s nearly impossible for users to catch every red flag themselves. That’s why Android’s built-in defenses actively intercept these threats before they reach…

Read more →

Arctic Wolf is expanding its AI-powered security capabilities with new tools designed to stop cyberattacks earlier, identify unauthorized AI usage, and provide greater transparency into automated security operations. Announced at the company’s 2026 Security Operations Summit, the innovations include Aurora Adaptive Threat Protection, a new endpoint security offering; SwarmView, which provides visibility into AI-driven security…

Read more →

Microsoft says some users may have trouble turning on Smart App Control after installing this month’s KB5127648 Windows 11 security update. […]

Read more →

Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are calling for tougher rules and the establishment of a new international body overseeing best practice for AI development. In an open letter the AI specialists — 487, at time of publication, including many…

Read more →

Fresh research suggests recent panic over AI-generated malware may be overblown. Last month Anthropic detailed how Russia-linked cyberespionage group Midnight Blizzard used Claude to rebuild malware each time security tools flagged its backdoor as malign. “We observed GTG-20006 operate through customized AI-driven workflows that automated much of their operations from development, infrastructure acquisition, phishing, persistence…

Read more →

The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts. […]

Read more →

The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas. CenterPoint Energy is a regulated utility company used to deliver natural gas and electricity infrastructure, maintain power grids and pipelines, and restore service across parts of Texas, Indiana, Ohio, and Minnesota. The organization…

Read more →

Cloud Gaming Is Expanding How Players Access PC Gaming For many years, the world of PC gaming operated on a simple basis: buy a powerful computer, install the games and then…

Read more →

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could…

Read more →

Five years ago, cloud gaming in Australia was more of a proposition than reality. The idea was compelling: stream your PC games from powerful data centre hardware to almost any…

Read more →

AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations detected the unauthorized access. After internal reviews, the AI companies whose models were being tested

Read more →

BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. […]

Read more →

David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a cohort works, with weekly sessions, homework and measurements at the start and end. He explains how the group handled settings that…

Read more →

US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job data provider JobSpikr, removed duplicates and sorted each one by the security work it described. The postings…

Read more →

A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across thousands of posts on 16 underground forums from February through August 2026. Over that window, mentions…

Read more →

A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a

Read more →

More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report. Large attacks and distributed targeting strain defenses Attacks exceeding 1 Tbps or 1 Gpps increased 1,286% year over year. Much of that growth came from…

Read more →

Here’s a look at the most interesting products from the past week, featuring releases from NinjaOne, Qualys, Scytale, and SolarWinds. NinjaOne combines Katana AI and MCP server to accelerate IT problem resolution NinjaOne has announced Katana AI, an agentic AI technician that supports and elevates IT workers, and the NinjaOne MCP server, an agentic orchestration…

Read more →

Fastfetch is a system information tool written mainly in C that runs on Linux, macOS, Windows 8.1 and later, Android and several BSDs. The fastfetch project removed QuickJS scripting and changed what its Disk, Command and Shell modules report in version 2.70.0, released October 14. Configs written for older versions may print different values or…

Read more →

HPE’s EVP, president and GM of networking argues that the real test of AI is a better experience for users and less firefighting for IT teams. Bringing Aruba and Juniper…

Read more →

Deeper Network Promo

In Part 1, I looked at how Workday has swapped “your copilot, not your autopilot” for autopilot agents that keep humans in the loop. I also looked at how Workday President,…

Read more →

For the first wave of generative AI, the industry had a reassuring line ready for nervous workers. AI was “your copilot, not your autopilot.” Microsoft choosing “Copilot” as…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

A dossier prepared by search firm Korn Ferry reveals candid, and at times controversial, ways recruiters assess contenders for top jobs

Read more →

If the Innovation Keynote was Workday telling, the Community Day keynote was customers showing. And then a Wharton professor walked on stage and told the crowd that none of us,…

Read more →

The sports car will test America’s appetite for high-end electric sports cars—and Tesla’s own thesis.

Read more →

– Nokia is the first vendor with a 16-port line card solution that supports GPON, 10G, 25G and 50G PON on every port, enabling operators to evolve their networks with greater…

Read more →

That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking your movements and collecting your data, without you having to do a thing. This “zero-click mercenary spyware,” dubbed “AdFection,” is increasingly exploiting a sprawling online advertising ecosystem ripe for abuse, according to researchers at The…

Read more →

That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking your movements and collecting your data, without you having to do a thing. This “zero-click mercenary spyware,” dubbed “AdFection,” is increasingly exploiting a sprawling online advertising ecosystem ripe for abuse, according to researchers at The…

Read more →

Combination creates a new cybersecurity powerhouse to deliver a complete security platform that protects against AI-accelerated threats and data risks

Read more →

Safety incidents risk exposing AI developers to multibillion-dollar liabilities, with other businesses vulnerable for using the tech.

Read more →

I believe the cybersecurity industry may be approaching AI security the wrong way. AI agents are becoming more powerful every day. Systems like ChatGPT, Claude, and Grok can write and execute code, use command shells, browse the web, call APIs, interact with MCP servers, and access enterprise data. Yet much of the industry is taking…

Read more →

Australian organisations are increasingly adopting AI, but scaling it beyond pilot programs remains a significant challenge. In this Q&A, Kumaran C R, Vice President and…

Read more →

Although the Jev model rolled out last month by TypeSafe claims to have significant advantages over traditional LLMs, a security report published Wednesday argued that its streamlined approach makes it more vulnerable to some kinds of attack, compared to traditional LLMs.   “In some cases, [Jev] is even more vulnerable to attacks, with both adversarial text…

Read more →

Although the Jev model rolled out last month by TypeSafe claims to have significant advantages over traditional LLMs, a security report published Wednesday argued that its streamlined approach makes it more vulnerable to some kinds of attack, compared to traditional LLMs.   “In some cases, [Jev] is even more vulnerable to attacks, with both adversarial text…

Read more →

Datadog has introduced Scout 1.0, its first AI model specialised for investigating production issues. Scout powers Bits Investigation, Datadog’s AI site reliability engineer…

Read more →

Wearable AI device recognised in the Consumer Electronics category on TIME’s annual list of groundbreaking innovations

Read more →

Outcome-ready businesses outperform on customer satisfaction, strategic delivery and speed to value –with a clear cultural edge; new Vertage research shows why, and how others…

Read more →

Company brings delivery, security, and compute together to accelerate enterprise innovation at global scale

Read more →

Workforce compliance is becoming one of the defining issues for Australian organisations. Attempting to oversee a sizeable workforce without the right tools is becoming…

Read more →

Patch Tuesday 2026 continues to make history. Not only did it break the record for total number of patches in a month three times this year, this month shattered the previous…

Read more →

TruConfidence brings AI-powered remediation intelligence to help organisations eliminate cyber risk at machine speed and increase confidence in business resiliency

Read more →

SpaceX’s secure network for governments comes in many forms, including some services vital to the Ukrainian war effort.

Read more →

Adaptive from Workday General Manager, Ben Piercehttps://www.linkedin.com/in/benpierce23/, knows a good acronym when he hears one. A couple of minutes into our interview at…

Read more →

Deep tech companies face a familiar challenge: securing the funding and resources needed to turn promising research into commercially viable products. What is less understood…

Read more →

Partnership brings together DXC’s decades of experience operating mission-critical enterprise systems with LangChain’stechnology for safely and securely managing AI agent…

Read more →

The Asia Pacific and Japan media roundtable at Workday Rising 2026 started with the Ashes. An Australian journalist pointed out that a colleague moving home from Singapore was…

Read more →

Healthcare can’t stop. When a digital system behaves unexpectedly, a cyber incident disrupts access or a control fails, health leaders must be ready to respond while keeping…

Read more →

Leading Korean automotive parts manufacturer achieves 50% annual maintenance savings, improved service responsiveness and long-term stability for its highly customised SAP and…

Read more →

Mike Snyder, the vice president of energy and charging, stepped down as Tesla pivots to AI.

Read more →

The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.

Read more →

Built from decades of threat intelligence research, the new resource explains scams from the victims’ perspective and tracks emerging forms of cyber crime.

Read more →

When I pointed out that the Decision Intelligence demo at Workday Rising 2026 came back with an answer of 42, the same number Douglas Adams gave as the answer to life, the…

Read more →

Deeper Network Promo

Proofpoint agreed Thursday to acquire Varonis Systems in a cash transaction valued at approximately $6.3 billion, combining two companies that have positioned themselves around a shared bet: that securing data has become the central problem of the AI era. The acquisition pairs two distinct approaches to security. Varonis specializes in data security, mapping where sensitive…

Read more →

Rubrik has expanded its Project Hourglass AI security alliance with a new code-security offering powered by Anthropic’s Claude, extending the program beyond monitoring autonomous AI agents to identifying vulnerabilities in enterprise software before they reach production. Announced October 9, the expansion introduces Rubrik Code Guardian and adds three solution providers (AHEAD, Trace3, and World Wide…

Read more →

Don’t buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.

Read more →

Citizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad…

Read more →

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online – Built-in CODE Server app (richdocumentscode) for Nextcloud. […]

Read more →

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel’s live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel’s networking code,…

Read more →

European researchers need computing resources as well as scientific expertise to advance AI-assisted research. For cloud partners supporting those institutions, access to models is only part of the deployment challenge. Google announced Oct. 14 that it will provide $3 million in compute credits and access to frontier models for up to 200 European researchers. Through…

Read more →

Most enterprises don’t have a monitoring problem. They have too many monitors. Riverbed’s CIO told iTWire TV that the average enterprise runs 12 observability tools across…

Read more →

Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. […]

Read more →

Election influence campaigns, particularly ones playing out over social media, are a dime a dozen. Such campaigns – sometimes devised by foreign powers, other times by domestic groups – are often designed to influence the U.S. electorate. Fake accounts and online personas are created, networks of propaganda are disseminated and the campaign seeks to nudge…

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability  CVE-2026-76519 Cisco Secure Email…

Read more →

Hyperscalers are still searching for the right tone to drum up support.

Read more →

Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week’s security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong…

Read more →

Silent Lynx, a group likely based in Kazakhstan, targets Russian energy and government entities in espionage campaigns across Central Asia. Researchers from Cisco Talos and Recorded Future published a detailed paper on a threat actor they call Silent Lynx (aka UAT-6275, TAG-193), a Kazakhstan nexus group conducting espionage across Central Asia. The targets include the…

Read more →

A proxyjacking campaign has impacted devices in 34 countries, monetizing victims’ internet connections through a commercial residential proxy network. […]

Read more →

Welcome to this week’s edition of the Threat Source newsletter.  I’ve been following a lot of (sometimes heated) threads and discussions lately about the current vulnerability landscape. I learned new words/phrases such as Summer of Hell (although I’m writing this with 1°C/34°F outside), Vulnpocalypse, Bugmageddon, Bugpocalypse, Breachpocalypse…  Let’s look at some numbers: We crossed the…

Read more →

AI-powered security tools promise to make MSP operations more efficient, but new research from N-able suggests they may be creating additional challenges for providers already struggling with security alert fatigue. According to N-able’s AI Fog Report: When the Signal Becomes the Noise, released October 15, 61% of MSP respondents said security alert noise disrupts incident…

Read more →

Chasing overdue invoices can tie up finance teams for weeks, particularly when payment disputes and missing records slow the process. Genpact made its Accounts Receivable (AR) Suite generally available on Oct. 14 for manufacturers and mining companies, where complex contracts, payment disputes and fragmented financial processes can delay cash collection. The suite includes three modules:…

Read more →

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. […]

Read more →

Watch how this $9 million robotics project could revolutionize how we survey and protect our sewage systems.

Read more →

The partnership gives developers a new way to run sophisticated AI without renting computing power from the cloud.

Read more →

OpenAI says AI helped investigate a hidden recording device. The case highlights insider threats and why sensitive meetings need physical security checks.

Read more →

A researcher found 13.7 million previously leaked records in an unsecured database linked to Vibetech, highlighting risks from exposed and reused passwords.

Read more →

Eyeing Apple’s new Home Collection products? Renters should check their lease agreement before installing.

Read more →

Apple reportedly set a date to unveil its new touchscreen MacBooks. Here’s what else we expect.

Read more →

We applied AWS Security Agent (now part of AWS Continuum), our autonomous penetration-testing agent, to 37 real, recently disclosed Common Vulnerabilities and Exposures (CVEs), each packaged as a live, containerized target with a flag hidden at the vulnerability’s intended sink. Starting from an unauthenticated or low-privilege position (an endpoint URL and a one-line hint, no…

Read more →

Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday. The hidden attack code ran the moment an ad loaded on the screen, and in some cases…

Read more →

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives

Read more →

The best endpoint security solutions for small businesses include Bitdefender, ESET, Sophos, Avast, ThreatDown, and Acronis for protecting business devices.

Read more →

DSPM helps CISOs move beyond data visibility to prioritize meaningful exposures, drive remediation, and measure whether material data risk is actually declining.

Read more →