./Latest cybersecurity newsMon, 19 Oct 2026 12:01:13 GMT https://www.securityweek.com/one-compromised-login-exposed-millions-of-california-students-records/10futdaMon, 19 Oct 2026 11:55:50 GMTSecurityWeek. Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006. https://therecord.media/russia-cyberattack-firstvds-cloudx8dvnxMon, 19 Oct 2026 11:45:00 GMTThe Record. Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers.VulnerabilityBreach https://www.wiz.io/blog/anatomy-of-ai-driven-cloud-attacks1l0bt3wMon, 19 Oct 2026 11:26:53 GMTWiz Research. Wiz CIRT responded to AI-driven attacks spanning cloud, Kubernetes, CI/CD, and identity. Learn how these attacks behave and how to detect them.ResearchAI https://www.securityweek.com/exploited-fortinet-bug-linked-to-stealthy-fortigate-implant-in-telecom-hack/r60kanMon, 19 Oct 2026 11:13:23 GMTSecurityWeek. The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.VulnerabilityMalware https://www.malwarebytes.com/blog/data-breaches/2026/10/millions-of-california-students-sensitive-data-stolen-in-breachzuzmh1Mon, 19 Oct 2026 11:10:14 GMTMalwarebytes Labs. The California Department of Education notified students about a data breach at contractor Educational Testing Service.ResearchBreach https://www.schneier.com/blog/archives/2026/10/training-ais-to-solve-captchas.html1k1qbtnMon, 19 Oct 2026 11:07:43 GMTSchneier on Security. Interesting research : Abstract : Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an agent, the hundredth instance of a familiar puzzle costs… https://www.helpnetsecurity.com/2026/10/19/open-weight-ai-model-risks-microsoft-nvidia/1lyowa3Mon, 19 Oct 2026 11:04:12 GMTHelp Net Security. Organizations that run open-weight AI models on their own infrastructure may have to supply safety and security controls that an AI provider would otherwise handle for them, Microsoft and NVIDIA warn in a joint paper on managing the risks of these models.…AI https://www.aikido.dev/blog/drata-and-aikido-audit-ready-pentesting-built-into-your-compliance-workflow1q3e3nbMon, 19 Oct 2026 11:00:00 GMTAikido Security. Drata and Aikido bring AI pentesting into your compliance workflow. Get verified findings, auditor-ready reports, and up to $4,000 in free pentest credits. Category: ComplianceResearch https://securityaffairs.com/201285/hacking/big-fish-openbsd-root-exploit-chains-a-37-year-old-bsd-bug-with-a-kernel-flaw.html1234t68Mon, 19 Oct 2026 10:34:45 GMTSecurity Affairs. OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit and write-up this week for a local privilege escalation on…Vulnerability https://www.infosecurity-magazine.com/news/connectwise-shuts-off-cloud/ekc08wMon, 19 Oct 2026 10:30:00 GMTInfosecurity Magazine. Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client environments via stolen tokens https://news.google.com/rss/articles/CBMiZkFVX3lxTE9sdllPYVV6M0l4R1JKUzhVZjNPbEltRTlJa0NEZWNGaHVvNVlNNkVjc2NBVHJHcU9TcjRUZUlnT3kxRjZBZ1c1MTFua2VmUTlQOXhhYUYzNVBKT1hrRmlzR0xEemE5UdIBa0FVX3lxTE5jeUVSX2F1N1d1Tm9ibWN4V19ZMk82cUJ3bFhqWkV0S1Z1dExRUS1kalNxZ254OGplanBXbi1RbHYyVlZyWHV5bDRVeFVmbkFxT1pTZlFOZ0pZRGt6N3pxTENPMUdMb1VtVDZr?oc=5zq779bMon, 19 Oct 2026 10:14:01 GMTCybersecurity News. OpenCode Security Breach Exposes Third-Party API Keys of its Console Users CyberSecurityNewsBreach https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html1tn7bm1Mon, 19 Oct 2026 10:06:40 GMTThe Hacker News. A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini,…MalwareSupply chainAI https://www.infosecurity-magazine.com/news/cybersecurity-job-postings-fall/1g6htynMon, 19 Oct 2026 10:00:00 GMTInfosecurity Magazine. CyberSN observed a particularly big dip in cybersecurity leadership positions such as CISO and Cybersecurity Director in 2026 compared to 2025 https://cyberscoop.com/pegasus-spyware-serbia-critics-elections/1mon288Mon, 19 Oct 2026 10:00:00 GMTCyberScoop. The confirmed and suspected targets include a university rector backing Serbia's protests and a prosecutor who investigated a Trump-linked Belgrade development, weeks before parliamentary elections.Malware https://www.helpnetsecurity.com/2026/10/19/check-point-brand-impersonation-scams-q3-2026-report/yxl60qMon, 19 Oct 2026 09:38:17 GMTHelp Net Security. Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point Research in the third quarter of 2026, up from 23% in the previous quarter and roughly four times the share of any other brand. Top 10 most impersonated brands in phishing…Phishing https://www.securityweek.com/mitre-attck-v20-catalogs-ai-abuse-mfa-bypass-water-utility-attacks/1jmqaxnMon, 19 Oct 2026 09:37:04 GMTSecurityWeek. Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.AI https://securityaffairs.com/201236/hacking/attackers-abuse-stolen-connectwise-application-credentials-to-target-microsoft-365.html1783pvrMon, 19 Oct 2026 09:32:56 GMTSecurity Affairs. Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both SaaS Security and Cloud Management offline over the weekend… https://www.cybersecuritydive.com/spons/hybrid-mesh-firewalls-distributed-security-enforcement-for-a-self-driving/832929/1co50sdMon, 19 Oct 2026 09:00:00 GMTCybersecurity Dive. Can traditional firewalls keep up with today's distributed enterprise? Discover how hybrid mesh firewalls close security gaps without slowing networks. https://www.cybersecuritydive.com/spons/q-day-is-coming-how-to-prepare-for-post-quantum-security-challenges/832930/1vnrsuhMon, 19 Oct 2026 09:00:00 GMTCybersecurity Dive. Q-day is coming. Discover how to prepare your IT infrastructure for post-quantum security challenges. https://www.aikido.dev/blog/more-pentesting-same-budget-aiwq3dwcMon, 19 Oct 2026 09:00:00 GMTAikido Security. AI pentesting lets security teams test more often without raising the budget. Learn how upfront pricing and forecasts keep costs predictable. Category: NewsResearch https://bsky.app/profile/hackmanac.com/post/3my7oq5q7lc2kdwf443Mon, 19 Oct 2026 08:19:00 GMTHackmanac Alerts. Italy - Mastelli The Qilin ransomware group claims to have breached Mastelli, a bio-pharmaceutical company based in Sanremo. Threat actor: Qilin Sector: Healthcare Data exposure (claimed): Not specified Data type: Not specified Observed: Oct 18, 2026BreachRansomware https://bsky.app/profile/hackmanac.com/post/3my7oh7ggt22k1kjg65hMon, 19 Oct 2026 08:14:00 GMTHackmanac Alerts. Japan - First Brothers Co. Ltd The Qilin ransomware group claims to have breached First Brothers Co. Ltd.BreachRansomware https://bsky.app/profile/hackmanac.com/post/3my7ny5uqhs2k177pp5qMon, 19 Oct 2026 08:06:00 GMTHackmanac Alerts. Egypt: Telecom Egypt - We academy The n0n hacker group claims to have breached Telecom Egypt's training academy, allegedly stealing course materials, student records, programming projects, examination resources and the complete course database.Breach https://www.securityweek.com/anthropic-acquires-confidential-ai-startup-opaque-systems/13j4yuoMon, 19 Oct 2026 07:45:25 GMTSecurityWeek. Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underlying hardware.AI https://securityaffairs.com/201258/security/japans-siteguard-waf-flaw-cve-2026-106931-is-already-being-exploited.html1f4kr6sMon, 19 Oct 2026 07:43:12 GMTSecurity Affairs. Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an OS command injection bug in SiteGuard Server Edition. Threat…VulnerabilityZero-day https://www.malwarebytes.com/blog/news/2026/10/a-week-in-security-october-12-october-181msbiu2Mon, 19 Oct 2026 07:01:00 GMTMalwarebytes Labs. A list of topics we covered in the week of October 12 to October 18 of 2026Research https://thehackernews.com/2026/10/unpatched-broadcom-wi-fi-flaw-lets.htmlc44q84Mon, 19 Oct 2026 06:29:44 GMTThe Hacker News. A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack…Vulnerability https://www.cybersecuritytribe.com/articles/ai-first-cybersecurity-still-depends-on-getting-the-fundamentals-right1x8nr0pMon, 19 Oct 2026 06:16:44 GMTCybersecurity Tribe. Why the Fundamentals of Security Matter Even More as AI Accelerates the BusinessAI https://thehackernews.com/2026/10/opencode-console-breach-may-have.htmlynfx3xMon, 19 Oct 2026 06:07:08 GMTThe Hacker News. An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode's optional hosted service: a workspace saves its…Breach https://cybersecuritynews.com/google-unveils-new-android-ai-protections/pn8rtaMon, 19 Oct 2026 06:04:18 GMTCybersecurity News. Google has announced a new set of Android security protections designed to stop mobile scams across calls, text messages, chat apps, web links, and account verification codes. The update comes as criminals increasingly use spoofed phone numbers, fake bank…PhishingAI https://www.helpnetsecurity.com/2026/10/19/bearer-cli-free-code-security-scanning-tool-sast/1lexylmMon, 19 Oct 2026 05:30:38 GMTHelp Net Security. Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the sensitive data they touch. SAST means the tool reads code without running it. Organizations can use it freely, with a…Vulnerability https://www.helpnetsecurity.com/2026/10/19/rpo-rto-video/2obehgMon, 19 Oct 2026 05:00:21 GMTHelp Net Security. In this Help Net Security video, Matthew Burden, CEO of BlackBox Hosting, explains RPO and RTO and how they differ in practice. RPO, the recovery point objective, is the most data you can lose, measured in time. RTO, the recovery time objective, is the… https://www.theregister.com/security/2026/10/19/connectwise-turns-off-its-saas-y-backup-security-and-management-services-to-probe-security-snafu/5303758mf1hcmMon, 19 Oct 2026 04:31:00 GMTThe Register. Huntress alleges takeover of M365 accounts https://www.helpnetsecurity.com/2026/10/19/datadome-ai-agent-traffic-report/1xcpb8kMon, 19 Oct 2026 04:30:52 GMTHelp Net Security. AI agent traffic across DataDome’s network grew 41.5% quarter over quarter to nearly 25 billion requests in Q3 2026, according to the company’s AI Traffic Report Q3 2026. Meta’s Muse generated 29.1 million requests between September 22 and October 3, its…AI https://news.google.com/rss/articles/CBMid0FVX3lxTE92bzZfT05QQjk1dmpuYUt1TDJxd3M4d1prOUlBemxZd25vRlphMHljb3BlWDE0RkwwMFpZQnB4QXNCczdxbzdudXpVSE43c0ZwRWV6N0t3LXhYbURhcUw4TFl3UmZ1Z3FjQVlSQ3pCeldZMWZ3eTNz0gF8QVVfeXFMT3pRUTY1aDBJZ0RwR0dPejVOaTBoN1dfNkJkSXJrZFhTLVJDSEVZU0VzRWRkR1pua0RSZ0VHZ1FENWZjT3djTGRjdFpBWGRka1RSODlfUXQ4anUyVTdFOHY4MkU1cEJoYzRsUWp5Nmc5d1A3eHJuMDhVeVdoYw?oc=5oa1m2oMon, 19 Oct 2026 04:28:04 GMTCybersecurity News. Microsoft Confirms October Windows Updates Can Break Exchange Server Email Services CyberSecurityNews https://cybersecuritynews.com/plex-vulnerabilities-exploited-in-wild/53zhu3Mon, 19 Oct 2026 04:14:01 GMTCybersecurity News. Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a researcher recording successful attacks against a honeypot on October 17, 2026. The activity follows the release of Plex2Shell, a public exploit that chains…VulnerabilityZero-dayMalware https://www.helpnetsecurity.com/2026/10/19/semperis-ransomware-employee-safety-report/1eufsluMon, 19 Oct 2026 04:00:22 GMTHelp Net Security. Ransomware attackers threatened employees’ family members or friends at 37% of organizations surveyed for Semperis’ 2026 Ransomware Risk Report. The survey covered 1,200 IT and security professionals at organizations that had experienced at least one…Ransomware https://cybersecuritynews.com/october-updates-break-exchange-server/1q56t5gMon, 19 Oct 2026 03:39:03 GMTCybersecurity News (+1 more sources). Microsoft has confirmed that Windows Server security updates released on October 13, 2026, can disrupt Exchange Server email services, blocking webmail access and leaving messages undelivered. The issue affects some on-premises systems running Exchange Server…Vulnerability https://news.risky.biz/risky-bulletin-pwnescape-vulnerability-lets-you-escape-kvm/9rbs7oMon, 19 Oct 2026 02:39:34 GMTRisky Bulletin. In other news: Supply chain incidents at AOMEI and ConnectWise; Intel discontinues SGX; US infosec job postings fell by 25%.VulnerabilitySupply chain https://horizon3.ai/news/press-release/horizon3-singapore-expansion-asean-headquarters/107fihqMon, 19 Oct 2026 01:10:00 GMTHorizon3.ai. Horizon3 announces its expansion in Singapore, supported by strategic investments from EDBI and SG Growth Capital. The company will establish its ASEAN headquarters and a Regional Centre of Excellence, expand local operations, and help organisations across…ResearchAI https://securityaffairs.com/201268/iot/16-year-old-broadcom-wi-fi-bug-lets-attackers-take-over-routers-without-a-password.html1ijhvxzMon, 19 Oct 2026 00:36:33 GMTSecurity Affairs. A Broadcom Wi-Fi flaw dating back to 2010 allows attackers within Wi-Fi range to execute code on vulnerable routers without authentication. Researcher Quentin Kaiser presented a talk at Hexacon in Paris documenting a vulnerability in Broadcom’s proprietary…Vulnerability https://www.infostealers.com/report/infostealers-weekly-report-2026-10-12-2026-10-19/1laay6kMon, 19 Oct 2026 00:00:00 GMTInfoStealers. InfoStealers Weekly Report – In this comprehensive report, we provide you with valuable insights into the most pressing threats facing organizations today. As cyberattacks continue to grow in…ResearchMalware https://objective-see.org/blog/blog_0x57.htmlmaxdzcSun, 18 Oct 2026 21:00:39 GMTObjective-See. A sophisticated Lazarus Group implant has arrived on macOS. In this post, we deconstruct the Mac variant of a OSX.Dacls, detailing its install logic, persistence, and capabilities.ResearchMalwareAPT https://objective-see.org/blog/blog_0x56.htmlmi1eidSun, 18 Oct 2026 21:00:39 GMTObjective-See. Today we uncover two (local) security flaws in Zoom's latest macOS client. First, a privilege escalation vulnerability, and second, a method to surreptitiously access a user's webcam and microphone (via Zoom).ResearchVulnerability https://objective-see.org/blog/blog_0x55.html1knfaiqSun, 18 Oct 2026 21:00:39 GMTObjective-See. CVE-2017-7170 was a local priv-esc vulnerability that affected OSX/macOS for over a decade! Here (for the first time!), we dive into the technical details of finding the bug, the core flaw, and exploitation.ResearchVulnerability https://objective-see.org/blog/blog_0x54.html16vr7j3Sun, 18 Oct 2026 21:00:39 GMTObjective-See. The Lazarus group's latest implant/loader supports in-memory loading of 2nd-stage payloads. In this post we describe exactly how to repurposing this 1st-stage loader to execute *our* custom 'fileless' payloads!ResearchMalwareAPT https://objective-see.org/blog/blog_0x53.htmlv9s598Sun, 18 Oct 2026 21:00:39 GMTObjective-See. Our annual report on all the Mac malware of the year - including samples for download, infection vectors, persistence mechanisms, payloads and more!ResearchMalware https://objective-see.org/blog/blog_0x52.html7d9yndSun, 18 Oct 2026 21:00:39 GMTObjective-See. A massively popular iOS application turns out to be a government spy tool! Here, we analyze the app; decrypting its binary and studying its network traffic.Research https://objective-see.org/blog/blog_0x51.html1f1lzkmSun, 18 Oct 2026 21:00:39 GMTObjective-See. The rather infamous APT group, "Lazarus", continues to evolve their macOS capabilities. Today, we tear apart their latest 1st-stage implant that supports remote download & in-memory execution of secondary payloads!ResearchAPT https://objective-see.org/blog/blog_0x50.html2pzuf7Sun, 18 Oct 2026 21:00:39 GMTObjective-See. A 0day logic flaw in Microsoft Excel leads to 'remote' code execution on macOS, via malicious macros.ResearchVulnerabilityZero-day https://objective-see.org/blog/blog_0x49.html1ayob0xSun, 18 Oct 2026 21:00:39 GMTObjective-See. A new macOS backdoor written by the infamous Lazarus APT group needs analyzing. Here, we examine it's infection vector, method of persistence, capabilities, and more!ResearchAPT https://objective-see.org/blog/blog_0x48.html1jpqds4Sun, 18 Oct 2026 21:00:39 GMTObjective-See. Learn how to leverage Apple's new Endpoint Security Framework to create a comprehensive (user-mode) File Monitor for macOS 10.15!Research https://objective-see.org/blog/blog_0x47.htmlvrs6wfSun, 18 Oct 2026 21:00:39 GMTObjective-See. Learn how to leverage Apple's new Endpoint Security Framework to create a comprehensive (user-mode) Process Monitor for macOS 10.15!Research https://objective-see.org/blog/blog_0x46.html15srb9uSun, 18 Oct 2026 21:00:39 GMTObjective-See. In this guest blog post, "Objective by the Sea" speaker, Csaba Fitzl writes about an interesting way to get root via Apps from the official Mac App Store!Research https://objective-see.org/blog/blog_0x45.htmlsl86h1Sun, 18 Oct 2026 21:00:39 GMTObjective-See. Recently, an attacker targeted (Mac) users via a Firefox 0day. In this third post, we analyze a second backdoor used in the attack, detailing its persistence, capabilities, and ultimate identify it a new variant of the cross-platform Mokes malware!ResearchZero-day https://objective-see.org/blog/blog_0x44.html1fi2060Sun, 18 Oct 2026 21:00:39 GMTObjective-See. Recently, an attacker targeted (Mac) users via a Firefox 0day. In this second post, we fully reverse OSX.NetWire.A, revealing (for the first time!), its inner workings and complex capabilities.ResearchZero-day https://objective-see.org/blog/blog_0x43.html1u3demrSun, 18 Oct 2026 21:00:39 GMTObjective-See. Recently, an attacker targeted (Mac) users via a Firefox 0day. In this first post, we triage and identify the malware (OSX.NetWire.A) utilized in this attack, identifying its methods of persistence, and more!ResearchZero-day https://objective-see.org/blog/blog_0x42.html1xkx5wmSun, 18 Oct 2026 21:00:39 GMTObjective-See. After the success of #OBTS v1.0, we decided to go international and plan #OBTS v2.0 in Europe! In this blog post, we re-live the highlights (from Monaco!) of "Objective by the Sea" v2.0.Research https://objective-see.org/blog/blog_0x41.html1md6589Sun, 18 Oct 2026 21:00:39 GMTObjective-See. @CodeColorist continues writing about bugs, such as CVE-2019-8521 and CVE-2019-8565 that provide a mechanism to elevate privileges to root on macOS.ResearchVulnerability https://objective-see.org/blog/blog_0x40.html1on2fu4Sun, 18 Oct 2026 21:00:39 GMTObjective-See. In part one of a guest blog post, @CodeColorist writes about several neat macOS vulnerabilities.ResearchVulnerability