IT Security & Day-to-Day Patch Intelligence Newsroom

NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries

Important Infosecurity Magazine

2026-10-29 Infosecurity Magazine

NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries

NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience

Moderate Infosecurity Magazine

2026-10-29 Infosecurity Magazine

CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience

CREST has published a framework for strengthening cyber resilience across financial services

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Online Scam Volumes Double to Overtake Phishing

Important Infosecurity Magazine

2026-10-29 Infosecurity Magazine

Online Scam Volumes Double to Overtake Phishing

Akamai research reveals that scam detections topped six million in Q2 2026

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

ICO Reprimands Staffordshire Police After Domestic Abuse Breach

Critical Infosecurity Magazine

2026-10-29 Infosecurity Magazine

ICO Reprimands Staffordshire Police After Domestic Abuse Breach

The UK’s privacy regulator has issued a reprimand to Staffordshire Police following a serious breach of personal information

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines

Moderate Infosecurity Magazine

2026-10-29 Infosecurity Magazine

NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines

The guidance sets out how federal agencies can prioritize PQC adoption for the most sensitive systems, to meet the 2031 transition deadline

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

MR ROBOT Malware-as-a-Service Targets Indian Bank Customers

Important Infosecurity Magazine

2026-10-29 Infosecurity Magazine

MR ROBOT Malware-as-a-Service Targets Indian Bank Customers

MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Japan’s GMO Internet Urges Customers to Disconnect PCs

Critical Infosecurity Magazine

2026-10-28 Infosecurity Magazine

Japan’s GMO Internet Urges Customers to Disconnect PCs

GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries

Important Infosecurity Magazine

2026-10-28 Infosecurity Magazine

Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries

Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber

Moderate Infosecurity Magazine

2026-10-28 Infosecurity Magazine

AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber

Nvidia’s Mark Weatherford says CISOs must translate AI cybersecurity risks into business priorities, clarify risk ownership and balance innovation with security controls

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Energy Giant Engie Notifies Customers of Supply Chain Breach

Critical Infosecurity Magazine

2026-10-28 Infosecurity Magazine

Energy Giant Engie Notifies Customers of Supply Chain Breach

An undisclosed number of Engie customers have had their data compromised after a supply chain incident

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances

Critical Infosecurity Magazine

2026-10-27 Infosecurity Magazine

Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances

The University of New Mexico is working to restore systems following the incident, which has been claimed by the BYOD ransomware group

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

OpenAI Compaction Flaw Exposed AI Reasoning to Researchers

Important Infosecurity Magazine

2026-10-27 Infosecurity Magazine

OpenAI Compaction Flaw Exposed AI Reasoning to Researchers

Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Hackers Infect 953 Online Stores With Scanner-Evading Code

Important Infosecurity Magazine

2026-10-27 Infosecurity Magazine

Hackers Infect 953 Online Stores With Scanner-Evading Code

Attackers have infected 953 online stores with a scanner-evading JavaScript loader since July 2025

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs

Critical Infosecurity Magazine

2026-10-27 Infosecurity Magazine

ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs

ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told Infosecurity

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes

Critical Infosecurity Magazine

2026-10-27 Infosecurity Magazine

Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes

Arctic Wolf warned that the function enables highly effective social engineering attacks, which lead to incidents such as ransomware

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Copenhagen University Breach Compromises Data on Half a Million People

Critical Infosecurity Magazine

2026-10-27 Infosecurity Magazine

Copenhagen University Breach Compromises Data on Half a Million People

Hackers have stolen personal information on over 520,000 people from the University of Copenhagen

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

First ISC2 AI Security Certification Expected for Early 2027

Moderate Infosecurity Magazine

2026-10-27 Infosecurity Magazine

First ISC2 AI Security Certification Expected for Early 2027

ISC2 is seeking 3000 volunteers to enrol to a pilot exam phase for its upcoming AI security certification

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Watchdog Urges Police and Fire Service to Improve Cybersecurity

Moderate Infosecurity Magazine

2026-10-27 Infosecurity Magazine

Watchdog Urges Police and Fire Service to Improve Cybersecurity

UK police forces and fire and rescue services have been urged to strengthen cybersecurity as rising cyber threats outpace current defenses

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure

Critical Infosecurity Magazine

2026-10-26 Infosecurity Magazine

CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure

CISA’s new strategy, CISA 2030, will focus on rapid detection and response and resiliency of critical services ahead of “passive defense”

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens

Critical Infosecurity Magazine

2026-10-26 Infosecurity Magazine

Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens

A large-scale GitHub campaign abused stolen access tokens to target 13,500+ branches and repositories with secret-stealing workflows

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Linux Flaws Exposed Before Fixes as Root Exploit Goes Public

Important Infosecurity Magazine

2026-10-26 Infosecurity Magazine

Linux Flaws Exposed Before Fixes as Root Exploit Goes Public

Six Linux flaws were made public, including one with a working root exploit and no merged fix

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

CyberWatch Newsroom Live Intel

New Framework Puts Ransomware Resilience for AI Systems in Focus

Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit

Binance Hit by Record-Breaking $6.3bn Hack in Largest Cryptocurrency Heist in History

NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries

CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience

Online Scam Volumes Double to Overtake Phishing

ICO Reprimands Staffordshire Police After Domestic Abuse Breach

NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines

MR ROBOT Malware-as-a-Service Targets Indian Bank Customers

Japan’s GMO Internet Urges Customers to Disconnect PCs

Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries

AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber

Energy Giant Engie Notifies Customers of Supply Chain Breach

Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances

OpenAI Compaction Flaw Exposed AI Reasoning to Researchers

Hackers Infect 953 Online Stores With Scanner-Evading Code

ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs

Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes

Copenhagen University Breach Compromises Data on Half a Million People

First ISC2 AI Security Certification Expected for Early 2027

Watchdog Urges Police and Fire Service to Improve Cybersecurity

CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure

Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens

Linux Flaws Exposed Before Fixes as Root Exploit Goes Public