CyberSecurity Updates

15 Oct

Context Is King in the Fight Against Modern Cyberattacks

Information, News

For most of its history, cybersecurity has been reactive by design. Spot the bad event, shut it down. But as cyberattacks evolve, this thinking must evolve too. In the past, attackers relied on a single dramatic exploit to access the crown jewels. But the nature of attacks has changed. Defenders see ordinary events they don’t think are important enough to follow up on, but before they realize it, these events lead to a dramatic breach.…

Read More
14 Oct

AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds

Information, News

A new report from Booz Allen demonstrates that “frontier super intelligence navigated unfamiliar industrial systems, adapted when blocked, and moved physical equipment within minutes.” The findings of the report were presented last week at SecurityWeek’s Industrial Control Systems (ICS) Cybersecurity Conference in Nashville, ahead of the public release. Use of the term ‘super intelligence’ is, however, confusing. This is not the first time the firm has used it, but it seems to be indistinguishable from…

Read More
14 Oct

U.K. Sanctions Cryptomus for RU Money Laundering

Information, Insights

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions. Heleket’s support agent on Telegram claims, despite all evidence to the contrary, that it is not affiliated with Cryptomus. Image: Richard Sanders. On October 8, the U.K. issued sanctions (PDF) against Cryptomus — previously…

Read More
14 Oct

Kicking off Cybersecurity Career Week with NIST!

Insights

Credit: NIST Considering a career in cybersecurity? Cybersecurity Career Week (CCW), a campaign led by the NICE Program at NIST from October 19-24, 2026, aims to raise public awareness and help people find their path to #ChooseCyber. During this week, academia, industry, non-profit organizations, and government agencies host events, share resources, provide trainings, and engage community to build awareness about the cybersecurity job opportunities, educate people on how to develop capabilities to qualify for cybersecurity…

Read More
14 Oct

What to do when a data breach notice doesn’t say much

Information

Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next. Phil Muncaster 12 Oct 2026  •  , 7 min. read Publicly reported data breaches hit an all-time high in the US last year, with over 3,300 incidents recorded and nearly 280 million victim notices mailed out. But are all of these worth the paper they’re written on? Increasingly, they lack crucial details. As the…

Read More
13 Oct

Microsoft Patches More Than 1,400 Security Flaws

Information, Insights

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Just one of the weaknesses patched this week is considered a “zero day,” or already exploited in the wild. CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows…

Read More
13 Oct

Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say

Information, News

An engineer at OpenAI has been charged with secretly installing a recording device inside a conference room in what officials said Tuesday was an effort to capture sensitive conversations about the company’s technology. The employee, identified as a 35-year-old Saudi national named Abdulrahman Alfozan, was arrested Friday, a week after the ChatGPT maker discovered an audio recording device hidden in the conference room, according to a criminal complaint filed in federal court in San Francisco.…

Read More
13 Oct

CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure

Attacks, Insights, Malware

CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary commands, to conduct credential theft and data exfiltration. CISA added CVE-2026-104935 to its Known Exploited Vulnerabilities (KEV) Catalog on Oct. 13, 2026.  CISA urges organizations with affected Ivanti…

Read More
12 Oct

IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion

Information, News

IonQ on Monday said it signed a definitive agreement to buy Elisity in a stock-only transaction worth up to $1.3 billion. Up to $150 million of that amount is earnout consideration, contingent on how Elisity’s business performs. IonQ expects to complete the acquisition in the fourth quarter of 2026. The number of IonQ shares issued will depend on the company’s volume-weighted average price over 20 trading days ending shortly before closing, but the price will…

Read More
10 Oct

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

Information, News

A Kansas City, Missouri man has been sentenced to 32 months in jail for crimes related to a ransom attack against his own company. The DOJ has announced the sentencing of Daniel Rhyne. He had already pleaded guilty to ‘extortion in relation to a threat to cause damage to a protected computer’ and ‘intentional damage to a protected computer’. Fifty-nine-year-old Rhyne had been a core infrastructure engineer at an industrial firm headquartered in Somerset County,…

Read More