Cybersecurity

19 OCT 2026· Automated publication

'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery

Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.

Read the entry →

ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs

Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains …

OnlyFans Copyright Takedowns Expose Compromised Websites

Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and…

With open-weight AI, more of the security burden falls on enterprises

Organizations that run open-weight AI models on their own infrastructure may have to supply safety and security controls that an AI provide…

Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks

Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point Research in the third quarter of 2026, up from 23% in th…

Are clearinghouses the answer to the AI hacking threat?

This summer, the White House rolled out the Gold Eagle Initiative, billed as an “unprecedented” effort to coordinate cybersecurity vulnerab…

Bearer CLI: Free, source-available code security scanning tool (SAST)

Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the…

BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs

Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.

Enterprise AI Enters Risk Management Phase as Security Concerns Rise

Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.

Closing the Binary Blind Spot: Domain-Knowledge Injection for LLM Malware Triage in npm Packages

IntroductionSupply chain attacks on package registries have grown in volume and sophistication [1]...

When Your Ransomware Negotiator Works for the Other Side

The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.

Hackers disguise phishing as promising business opportunities

Attackers are breaking into business email accounts with short messages asking whether a company can quote on an upcoming project, the kind…

Presentation: Exploding GPUs

Andrew Martin discusses why AI security is fundamentally tied to Kubernetes security. He shares insights into the evolving AI threat landsc…

Presentation: Exploding GPUs

Andrew Martin discusses why AI security is fundamentally tied to Kubernetes security. He shares insights into the evolving AI threat landsc…

Fake Arch Linux AUR packages exploit typos to run malware with root privileges

Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a strange…

Chainguard Launches Secure Workspaces and Checks for AI Coding Agents

Software supply chain security company Chainguard has announced two beta products for running and testing code written by developers and AI…

Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say

Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community.…

TypeSafe’s Jev ‘even more susceptible to attack’ than LLMs, says security vendor

Although the Jev model rolled out last month by TypeSafe claims to have significant advantages over traditional LLMs, a security report pub…

SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape

The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking …

F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud

Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms…

AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too

Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.

Staying Evergreen: How we automated secure access and repo hygiene in a shared org

Put native GitHub features to work to review outside collaborator access and archive stale repositories. The post Staying Evergreen: How we…

Vulnerability Management Isn't About the Score — It's About How It Applies to You

Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.

ARMORY CASTLE Exploits BeyondTrust

Written by: Jayson Frost, Bryce Greathouse, Brian Meyer, John Palmisano, Rajesh Rajeshirke, Steve Rasch, John Wolfram Introduction On Octob…

Article: Server-Side DPoP and Token Exchange in Spring Security 7

Spring Authorization Server now lives inside Spring Security 7 under the same Maven coordinates, so the upgrade is a version bump. This ser…

What hundreds of Microsoft 365 deployments have taught me about cybersecurity

I’ve spent more than 20 years running IT and security for organizations across California and around the country. Over that time, my team h…

Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles

CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an o…

Yam Store: The Phishing Network Behind a Billion Messages

A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages w…

Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat

A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys,…

Beyond the perimeter: The network as the security fabric for the AI era

Enterprises have historically built separate network and security architectures, but this separation is becoming increasingly difficult to …