Cybersecurity Headlines

Naval hack, Muse exposes secrets, Army researching offensive AI hacking

Russian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html  Muse exposes secrets when sharing chats https

OpenCode keys exposed, AI agents raid websites, Rank Math backdoor

OpenCode breach exposes users' AI keys https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/ One hacker puts AI a

Cybersecurity jobs report, ConnectWise suspends cloud backup, Drupal patches flaws

Cybersecurity jobs report reveals mixed bag https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/ https://cybersn.c

The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware

See the full stories at cisoseries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Dennis Pickett, vp and CISO, RTI International, and Dav

Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers

CenterPoint Energy reveals data breach numbers https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach Zero-Click Candiru spywa

FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack

FBI shuts down North Korean laptop farms https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/ Meta's st

Webcams go to war, Kimsuky sends invites, Anthropic blocks copycats

Webcams get drafted into war https://www.wsj.com/tech/cybersecurity/video-cameras-webcams-hacked-war-b00b8a24?st=RRCsaw Kimsuky's invitations come with malware https:

Supermarket freezer hack, Ahold Delhaize offline, spy chip in crypto wallets

Hackers turn up the heat on French supermarkets: https://www.infosecurity-magazine.com/news/french-supermarket-chains/ Ahold Delhaize offline after cyber attack: https:

Anthropic restricts Claude, Google Calendar phishing, FBI hack arrest

CISA's KEV catalog grows by five https://securityaffairs.com/200734/security/u-s-cisa-adds-proftpd-onlyoffice-docs-strapi-apache-struts-and-isc-bind-flaws-to-its-known-

The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud

Read the full stories at CISOSeries.com.  This week's Department of Know is hosted by Rich Stroffolino, with guests Derek Fisher, Director of the Cyber Defense and Info

Top level domain theft, Yandex attacked, Cisco Nexus flaws

Attackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major Yandex data ce

Poetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers

Botnet takes orders from a poem https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/ Flock's warrantless tracking hits a roadblock https://therec

Agents vs Wikipedia, South Korean bank hacks, ASOS breached

Agents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html  South Korea claims agents were used in bank h

Google pauses bug bounties, ATB faces extortion, Exchange flaw exposes mailboxes

Google pauses open-source bug bounties amid AI spam Ukraine's largest grocery chain hit by extortion attack Exchange flaw exposes other users' mailboxes Get the sho

Warlock continues SharePoint exploits, ShinyHunters member flips China's AI espionage

Warlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI policy expe

The Department of Know: ShinyHunters vs FBI, Kiteworks shutdown, and hundreds of orgs hit by rogue AI

Read all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon, CISO, American Century Investments, and

AI readiness reports, KillSec takedown, OpenAI website scraping

Report suggests AI and quantum threat preparedness is lacking Authorities seize KillSec extortion group arrest leader Dozens more prominent websites scraped by OpenAI

Gemini 4 enters the ring, MI5 flags research ties, Custom GPTs deliver malware

Gemini 4 starts with cybersecurity MI5 flags Chinese research funding Custom GPTs steer users into ClickFix attacks Get the show notes here: https://cisoseries.co

Star Blizzard, Cloudflare CA, GPT-6.1 scuttled

Microsoft details new Star Blizzard and NeedyMantis activity Cloudflare to become a public certificate authority Safety concerns scuttle GPT-6.1 Get the show notes

GPT-6 Astra goes off script, ShinyHunters suspect arrested, Nvidia corrals rogue AI agents

GPT-6 Astra goes off script in attack simulations Dutch police arrest "reformed" hacker in ShinyHunters probe Nvidia builds a browser for AI agents Get the show not