IT Security & Day-to-Day Patch Intelligence Newsroom

Wikimedia Says Rogue AI Agents Abused its Platforms

Moderate Infosecurity Magazine

2026-10-09 Infosecurity Magazine

Wikimedia Says Rogue AI Agents Abused its Platforms

Wikimedia says OpenAI agents performed unauthorized actions on its platforms, including edits to wikis

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Q3 2026 Sets New Record for Ransomware Attacks

Critical Infosecurity Magazine

2026-10-09 Infosecurity Magazine

Q3 2026 Sets New Record for Ransomware Attacks

Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group

Moderate Infosecurity Magazine

2026-10-09 Infosecurity Magazine

UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group

The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

AI Training Critical as Governance Challenges Grow

Critical Infosecurity Magazine

2026-10-09 Infosecurity Magazine

AI Training Critical as Governance Challenges Grow

As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help professionals manage AI securely

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push

Moderate Infosecurity Magazine

2026-10-09 Infosecurity Magazine

Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push

Ten leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Commissioner's Office

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Attackers Hijack Three ccTLDs to Obtain Google Certificates

Important Infosecurity Magazine

2026-10-08 Infosecurity Magazine

Attackers Hijack Three ccTLDs to Obtain Google Certificates

Attackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

ASOS Confirms Data Breach Linked to Stolen Employee Credentials

Critical Infosecurity Magazine

2026-10-08 Infosecurity Magazine

ASOS Confirms Data Breach Linked to Stolen Employee Credentials

The ASOS hack comes from the compromise of agentic marketing platform Simon AI, said the attackers

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware

Important Infosecurity Magazine

2026-10-08 Infosecurity Magazine

Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware

Russia-aligned UAC-0099 has steadily upgraded its MATCHBOIL downloader since 2024

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Chinese Hacker Deployed AI in Campaign Against South Korean Banks

Moderate Infosecurity Magazine

2026-10-08 Infosecurity Magazine

Chinese Hacker Deployed AI in Campaign Against South Korean Banks

CrowdStrike revealed that a Chinese-speaking hacker deployed agentic pentesting tool ARTEX and Claude to help breach data from South Korean financial firms

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Critical Flaw in Multiple Atlassian Products Exploited in the Wild

Critical Infosecurity Magazine

2026-10-08 Infosecurity Magazine

Critical Flaw in Multiple Atlassian Products Exploited in the Wild

A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said VulnCheck

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Europol and US Spending Watchdog Sound the Alarm Over Quantum Threats

Moderate Infosecurity Magazine

2026-10-08 Infosecurity Magazine

Europol and US Spending Watchdog Sound the Alarm Over Quantum Threats

Europol and US Government Accountability Office urge faster transition to post-quantum cryptography

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

FBI and Secret Service Warn of FortiBleed Lockout Threat

Moderate Infosecurity Magazine

2026-10-08 Infosecurity Magazine

FBI and Secret Service Warn of FortiBleed Lockout Threat

The FBI and Secret Service are warning Fortigate admins that their systems are still being targeted

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

OT Coalition Urges CISA to Mandate Federal OT Security

Moderate Infosecurity Magazine

2026-10-07 Infosecurity Magazine

OT Coalition Urges CISA to Mandate Federal OT Security

OTCC urged CISA to mandate baseline security requirements for federal operational technology

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Attackers Hide AI Prompt Injections Inside Phishing Emails

Important Infosecurity Magazine

2026-10-07 Infosecurity Magazine

Attackers Hide AI Prompt Injections Inside Phishing Emails

Barracuda finds phishing emails designed to manipulate both human users and AI assistants

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading

Moderate Infosecurity Magazine

2026-10-07 Infosecurity Magazine

Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading

A Group-IB researcher has found the Telegram account linked to the unauthorized ASOS customer notification previously engaged in gaming-item trading

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns

Moderate Infosecurity Magazine

2026-10-07 Infosecurity Magazine

Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns

A Yubico survey identified a significant gap between awareness and adoption of secure methods of authentication in enterprises

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One

Critical Infosecurity Magazine

2026-10-07 Infosecurity Magazine

Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One

Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Danish CPR Breach Highlights Challenge of Supply Chain Risk

Critical Infosecurity Magazine

2026-10-07 Infosecurity Magazine

Danish CPR Breach Highlights Challenge of Supply Chain Risk

A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

ClickFix Attack Hides VBScript Payload in Browser Cache

Important Infosecurity Magazine

2026-10-06 Infosecurity Magazine

ClickFix Attack Hides VBScript Payload in Browser Cache

ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog's length limit

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Nikkei Discloses Two Employee Cloud Account Compromises

Moderate Infosecurity Magazine

2026-10-06 Infosecurity Magazine

Nikkei Discloses Two Employee Cloud Account Compromises

Nikkei says two employee cloud accounts were accessed, with one used to send 9,000 phishing emails

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities

Critical Infosecurity Magazine

2026-10-06 Infosecurity Magazine

Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities

The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Critical Medical Devices Unable to Support PQC Transition

Critical Infosecurity Magazine

2026-10-06 Infosecurity Magazine

Critical Medical Devices Unable to Support PQC Transition

Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cryptography

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise

Moderate Infosecurity Magazine

2026-10-06 Infosecurity Magazine

ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise

ASOS customers have received a seemingly legitimate push notifications claiming the retailer’s IT systems have been breached through a Snowflake breach

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Police Urge Passkey Use After Surge in Cybercrime Profits

Moderate Infosecurity Magazine

2026-10-06 Infosecurity Magazine

Police Urge Passkey Use After Surge in Cybercrime Profits

Report Fraud says cybercrime revenue stemming from account takeover increased 417% annually

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.