Cybersecurity Headlines

Cybersecurity jobs report reveals mixed bag https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/ https://cybersn.com/resources/reports/cybersecurity-jobs-report ConnectWise Suspends cloud backup after supply chain attack https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html Drupal patches critical RCE flaws, warns of expl...

See the full stories at cisoseries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Dennis Pickett , vp and CISO, RTI International , and David Cross , CISO, Atlassian . Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com . Huge thanks to o...

CenterPoint Energy reveals data breach numbers https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach Zero-Click Candiru spyware infections at Al Jazeera tracked to targeted online ads https://thehackernews.com/2026/10/citizen-lab-traces-zero-click-candiru.html UK Legal Aid Agency Hack Scope Widens After Forensic Review https://www.securityweek.com/uk-legal-...

FBI shuts down North Korean laptop farms https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/ Meta's stolen credentials open GitHub repositories https://www.securityweek.com/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach/ Cisco email gateways face active attacks https://thehackernews.com/2026/10/cisco-warns-of-acti...

Webcams get drafted into war https://www.wsj.com/tech/cybersecurity/video-cameras-webcams-hacked-war-b00b8a24?st=RRCsaw Kimsuky's invitations come with malware https://therecord.media/north-korea-hackers-russia-ukraine Anthropic makes copycats work harder https://www.anthropic.com/research/distillation-defenses Adobe's patch pile hits 140 https://www.securityweek.com/adobe-patches-140-vulnerabilit...

Hackers turn up the heat on French supermarkets: https://www.infosecurity-magazine.com/news/french-supermarket-chains/ Ahold Delhaize offline after cyber attack: https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhize-takes-systems-offline-after-cyberattack/ Spy chip used in crypto wallet thefts: https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-i...

CISA's KEV catalog grows by five https://securityaffairs.com/200734/security/u-s-cisa-adds-proftpd-onlyoffice-docs-strapi-apache-struts-and-isc-bind-flaws-to-its-known-exploited-vulnerabilities-catalog.html Calendar phishing becomes a thing https://www.theguardian.com/money/2026/oct/11/calendar-phishing-scam-meeting-renewal-google-microsoft-paypal Canadian cybersecurity executive arrested in FBI h...

Read the full stories at CISOSeries.com .  This week's Department of Know is hosted by Rich Stroffolino, with guests  Derek Fisher , Director of the Cyber Defense and Information Assurance Program, Temple University , and Chris Ray , field CTO, GigaOm . Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for t...

Attackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major Yandex data center in Russia hit by Ukrainian drone https://therecord.media/yandex-russia-drone-ukraine Cisco warns of critical flaws allowing Nexus switch takeover https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowi...

Botnet takes orders from a poem https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/ Flock's warrantless tracking hits a roadblock https://therecord.media/oklahoma-flock-ruing-supreme-court-chatrie-decision npm packages come with unwanted extras https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html AWS gives AI agents a sandbox with house rules https:/...

Agents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html   South Korea claims agents were used in bank hacks https://therecord.media/south-korean-bank-hacks-ai-agents   ASOS confirms data breach https://www.ft.com/content/eab7052d-6640-4928-a128-8df73455ba0a   https://www.bleepingcomputer.com/news/security/asos-confirms-data-breach-af...

Google pauses open-source bug bounties amid AI spam Ukraine's largest grocery chain hit by extortion attack Exchange flaw exposes other users' mailboxes Get the show notes here: https://cisoseries.com/cybersecurity-news-october-6-2026/ Huge thanks to our sponsor, Vanta Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, r...

Warlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI policy experts Get the show notes here: https://cisoseries.com/cybersecurity-news-warlock-continues-sharepoint-exploits-shinyhunters-member-flips-chinas-ai-espionage/ Huge thanks to our sponsor, Vanta Risk and regulation ramping up—and customers...

Read all the stories at CISOSeries.com . This week's Department of Know is hosted by Rich Stroffolino, with guests  Brett Conlon , CISO, American Century Investments , and Nick Espinosa , host, Deep Dive Radio Show . Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com...

Report suggests AI and quantum threat preparedness is lacking Authorities seize KillSec extortion group arrest leader Dozens more prominent websites scraped by OpenAI software Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-readiness-reports-killsec-takedown-openai-website-scraping/ Huge thanks to our episode sponsor, Intezer Today's tip: treat every false positive like a bug...

Gemini 4 starts with cybersecurity MI5 flags Chinese research funding Custom GPTs steer users into ClickFix attacks Get the show notes here: https://cisoseries.com/cybersecurity-news-october-1-2026/ Huge thanks to our episode sponsor, Intezer Today's tip: add up the hours your tier-one analysts spent closing alerts that turned out to be nothing. That's your real triage cost. At a hundred and fifty...

Microsoft details new Star Blizzard and NeedyMantis activity Cloudflare to become a public certificate authority Safety concerns scuttle GPT-6.1 Get the show notes here: https://cisoseries.com/cybersecurity-news-star-blizzard-cloudflare-ca-gpt-6-1-scuttled/   Huge thanks to our episode sponsor, Intezer Today's tip: when an AI calls an alert benign, ask for the evidence. The file, the memory, the c...

GPT-6 Astra goes off script in attack simulations Dutch police arrest "reformed" hacker in ShinyHunters probe Nvidia builds a browser for AI agents Get the show notes here: https://cisoseries.com/cybersecurity-news-september-29-2026/ Huge thanks to our episode sponsor, Intezer Today's tip: time how long an employee-reported phish waits for a verdict. If it's a day, someone already clicked. Salesfo...

Another Microsoft SharePoint flaw now exploited Details and doubts emerge regarding OpenAI hack of Australian Health portal Kiteworks urges customers to stop using platform Get the show notes here: https://cisoseries.com/cybersecurity-news-new-sharepoint-exploit-australian-openai-hack-developments-kiteworks-urges-stoppage/ Huge thanks to our episode sponsor, Intezer Today's tip: pull your low-seve...

Read all the stories at CISOSeries.com . This week's Department of Know is hosted by Rich Stroffolino, with guests  Dmitriy Sokolovskiy , senior vice president, information security, Semrush , and Christian Frösch , CISO, CH Media . Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at...

OpenAI program hacks Australia's government health portal Astrana Health suffers data breach Ransomware gangs exploiting TeamCity flaw Get the show notes here: https://cisoseries.com/cybersecurity-news-september-25-2026/ Huge thanks to our episode sponsor, Nudge Security Here's a question that might make you sweat…how many AI agents are running in your org right now? Not sure? You're not alone. Bu...

ShinyHunters peeks at FBI assignments WordPress flaw wastes no time Pentagon's cyber appetite grows Get the show notes here: https://cisoseries.com/cybersecurity-news-september-24-2026/ Huge thanks to our episode sponsor, Nudge Security Here's a question that might make you sweat…how many AI agents are running in your org right now? Not sure? You're not alone. But, we have good news. Nudge Securit...

Cisco releases open-source CAIRN framework Muse zero-day opens the door to account takeovers Microsoft can't wake up from Nightmare Eclipse Get the show notes here:  https://cisoseries.com/cybersecurity-news-cairn-framework-muse-zero-day-bigdiskbuster/   Huge thanks to our episode sponsor, Nudge Security Here's a question that might make you sweat…how many AI agents are running in your org right n...

ShinyHunters hijacks Clop's own leak site Fake LastPass installers kill security tools Trusted npm release carries GHAPPIER malware Huge thanks to our episode sponsor, Nudge Security Here's a question that might make you sweat…how many AI agents are running in your org right now? Not sure? You're not alone. But, we have good news. Nudge Security now includes AI Agent Discovery, in addition to Day...

Researchers escape OpenAI Codex sandbox to run commands on host AI Force proposed to monitor technology Congress eyes new support for Cyber Command after recent suicide deaths Get the show notes here: https://cisoseries.com/cybersecurity-news-openai-codex-sandbox-escape-president-proposes-ai-force-cyber-command-suicides/ Huge thanks to our episode sponsor, Nudge Security Here's a question that mig...