Cybersecurity & AI News

CVE-2026-77228

CVE ID :CVE-2026-77228 Published : Oct. 19, 2026, 3:18 p.m. | 23 minutes ago Description :None Severity: 0.0 | NA Visit…

CVE-2026-77227

CVE ID :CVE-2026-77227 Published : Oct. 19, 2026, 3:18 p.m. | 23 minutes ago Description :None Severity: 0.0 | NA Visit…

CVE-2026-77225

CVE ID :CVE-2026-77225 Published : Oct. 19, 2026, 3:18 p.m. | 23 minutes ago Description :None Severity: 0.0 | NA Visit…

CVE-2026-86375

Dell Application Installer Missing Encryption of Sensitive Data Vulnerability

CVE-2026-112328

Sensei LMS 4.26.4 Broken Access Control via add_new_module_term AJAX

CVE-2026-112329

Sensei LMS 4.26.4 Broken Access Control via save_new_message

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone…

Why the enterprise AI security gap starts below the model

Why the enterprise AI security gap starts below the model  VentureBeat

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives…

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories

The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects…

Is CrowdStrike Holdings (CRWD) Fully Priced As Its AI Security Narrative Faces A Pullback?

Is CrowdStrike Holdings (CRWD) Fully Priced As Its AI Security Narrative Faces A Pullback?  Simply Wall Street

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created…

ImageDeep launches solar 4G AI security unit

ImageDeep launches solar 4G AI security unit  Security Journal Americas

Microsoft: October Windows Server updates break Exchange sign-in, mail flow

Microsoft: October Windows Server updates break Exchange sign-in, mail flow  BleepingComputer

ASD Essentials

ASD Essentials  Australian Cyber Security

Guidance for larger business and government

Guidance for larger business and government  Australian Cyber Security

News and updates

News and updates  Australian Cyber Security

Hackers exploit SiteGuard WAF flaw to run commands as admins

Hackers exploit SiteGuard WAF flaw to run commands as admins  BleepingComputer

Orphaned VBA Projects Inside DWG Files: YARA Rule

Here is the YARA rule I used to detect "Orphaned VBA Projects Inside DWG Files".

Haines City police add new safeguards for Flock cameras after officer accused of misuse

HAINES CITY, Fla. --- Haines City Police Department is changing how officers use Flock cameras after an officer was accused…

Haines City police officer accused of using FLOCK cameras to search estranged wife's vehicle over 700 times

HAINES CITY, Fla. — Haines City Police said an officer has been arrested after an investigation revealed FLOCK camera misuse.…

Haines City officer arrested for misusing Flock cameras to track estranged wife: Officials

HAINES CITY, Fla. - A Haines City police officer is accused of misusing Flock camera databases to track his estranged…

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack  BleepingComputer

Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials

Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials  CISA (.gov)

Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation

Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation  CISA (.gov)

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog  CISA (.gov)

ISC Stormcast For Friday, October 16th, 2026

North Korean scammers are getting hired, then holding companies to ransom

North Korean scammers are getting hired, then holding companies to ransom  Human Resources Director

Small Agents, Smaller Blast Radius: Controlling What AI Can Do

I believe the cybersecurity industry may be approaching AI security the wrong way.

Post-quantum updates to our TLS guidance

The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.

Using TLS to protect data

Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.

U.K. Sanctions Cryptomus for RU Money Laundering

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major…

Microsoft Patches More Than 1,400 Security Flaws

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's…

Help the NCSC understand how organisations approach external attack surface risk

We're looking to hear from people involved in evaluating, selecting or adopting EASM.

Quantum threat timeline raises cyber insurance questions for NZ brokers

Quantum threat timeline raises cyber insurance questions for NZ brokers  Insurance Business

NCSC and pals call out company that backed Chinese state hackers

NCSC and pals call out company that backed Chinese state hackers  Computer Weekly