Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
** Ravie Lakshmanan ** Oct 16, 2026 Artificial Intelligence / Web Security OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, …
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman’s fast, …
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct …
** Swati Khandelwal ** Oct 16, 2026 Vulnerability / OpenBSD A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a …
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy …
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX . The package, named " imgdecode …
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud …
A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client’s memory, and the researcher who reported it turned that into code execution on the …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the …
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing efforts to disrupt North Korea’s fraudulent remote IT worker (ITW) scheme …
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced …
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server , to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub , with …
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating system, Cisco said in an advisory on Wednesday. …
October 2026 Microsoft Patch Tuesday Published 2026-10-13. Last Updated 2026-10-13 19:25:52 UTC by Johannes Ullrich (Version: 1) 1 comment(s) Microsoft today released patches for 1,417 …
ISC Stormcast For Wednesday, October 14th, 2026 <https://isc.sans.edu/podcastdetail/10136>
Artificial Intelligence AI Turns Familiar Cyberattacks Into a Race Against Time IBM’s Steve Wallin talks to SecurityWeek on the effect of AI-driven attacks on enterprise defenses. By Kevin Townsend | …
Malware & Threats XWorm RAT Evolves Into Surveillance Platform Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser …
Artificial Intelligence Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread …
Data Breaches Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring …
Vulnerabilities Google Partially Reverses Chrome Bug Bounty Cuts Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities. By Eduard Kovacs | October 13, 2026 …
Vulnerabilities Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution …
Vulnerabilities Adobe Patches 176 Vulnerabilities Across 11 Products The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge. By Eduard Kovacs …
Tracking & Law Enforcement Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say Saudi national Abdulrahman Alfozan was arrested Friday and terminated …
** Ravie Lakshmanan ** Oct 13, 2026 Data Privacy / Compliance The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for …
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 …
