The Department of Know: Passkeys phished, Cisco hits root, nuclear red lines for AI
Release Date: 09/18/2026
Naval hack, Muse exposes secrets, Army researching offensive AI hacking
Cybersecurity Headlines
Russian-linked attacks hit naval shipbuilder Muse exposes secrets when sharing chats Army Cyber Command looking to offload attacks to AI DeepSeek booted from federal agencies DHS asked CISA to hack voting machine EU doesn’t require patching hacked freezers Cairn platform abused by threat actors Security Week: Reuters: Palo Alto still seeing active PAN-OS exploits LLMs getting better at COBOL Get the show notes here: Huge thanks to our episode sponsor, ThreatLocker Attackers do not always bring their...
info_outline
OpenCode keys exposed, AI agents raid websites, Rank Math backdoor
Cybersecurity Headlines
OpenCode breach exposes users’ AI keys One hacker puts AI agents to work on 1,200 sites Rank Math PRO updates deliver a persistent backdoor Nikkei discloses its third breach in a month Microsoft adds controls for rogue AI agents ClickFix attackers borrow Siemens’ signature Pegasus targets Serbian government critics before elections Bullhorn takes staffing platform offline after attack Get the show notes here: Huge thanks to our episode sponsor, ThreatLocker An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the...
info_outline
Cybersecurity jobs report, ConnectWise suspends cloud backup, Drupal patches flaws
Cybersecurity Headlines
Cybersecurity jobs report reveals mixed bag https://cybersn.com/resources/reports/cybersecurity-jobs-report ConnectWise Suspends cloud backup after supply chain attack Drupal patches critical RCE flaws, warns of exploits Chinese espionage attackers suspected of BeyondTrust zero-day https://therecord.media/beyond-trust-cyberattack-china Proofpoint to acquire Varonis’ data security Burger King Japan data breach exposes 11 million customer records BAE Systems cyberattack disrupts US federal court operations CikaBika Bot RAT abuses Discord Get the show notes here:...
info_outline
The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware
Cybersecurity Headlines
See the full stories at This week’s Department of Know is hosted by Rich Stroffolino, with guests , vp and CISO, , and , CISO, . Missed the live show? The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at . Huge thanks to our sponsor, Guardsquare Mobile security incidents are no longer the exception—they are the norm. Last year, seventy-two percent of companies suffered a mobile app security incident. As the primary gateway to your APIs and data, your mobile app requires more than just basic encryption; it needs a...
info_outline
Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers
Cybersecurity Headlines
CenterPoint Energy reveals data breach numbers Zero-Click Candiru spyware infections at Al Jazeera tracked to targeted online ads UK Legal Aid Agency Hack Scope Widens After Forensic Review Bank of America needed 1,000 contractors to patch bugs found by Mythos Microsoft takes down 3 major China-based phishing platforms Windows Server 2022 reaches end of mainstream support Senators press for AI safety and security French supermarket refrigeration attack widens Get the show notes here: https://cisoseries.com/cybersecurity-news-october-16-2026/ Huge thanks to our episode sponsor,...
info_outline
FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack
Cybersecurity Headlines
FBI shuts down North Korean laptop farms Meta’s stolen credentials open GitHub repositories Cisco email gateways face active attacks Ledger tells Asian sellers to stop sales CISA urges Ivanti VPN updates Microsoft’s patch count breaks the annual record Six days, three Chrome bugs, one sandbox escape Windows gets its Always On VPN back Get the show notes here: Huge thanks to our episode sponsor, Guardsquare AI is speeding up development, but at what cost? While ninety-six percent of teams now use AI tools, eighty-one percent report that AI-generated code has introduced new...
info_outline
Webcams go to war, Kimsuky sends invites, Anthropic blocks copycats
Cybersecurity Headlines
Webcams get drafted into war Kimsuky’s invitations come with malware Anthropic makes copycats work harder Adobe’s patch pile hits 140 Scam crackdown nets 28 arrests Fashion brands hit an IT snag npm closes a name-stealing loophole Chrome bug bounties bounce back Get the show notes here: Huge thanks to our episode sponsor, Guardsquare Is your mobile app truly protected? Relying on the OS isn’t enough. A global study of thirteen-hundred security and developer leaders found that ninety-six percent of teams using layered protection reported significantly fewer security incidents....
info_outline
Supermarket freezer hack, Ahold Delhaize offline, spy chip in crypto wallets
Cybersecurity Headlines
Hackers turn up the heat on French supermarkets: Ahold Delhaize offline after cyber attack: Spy chip used in crypto wallet thefts: Russian digital services disrupted from drone strike: Microsoft wants AI “emergency brakes”: UK’s AI Security Institute to get early model access: and Threat actors trying to use critical SonicWall SMA flaw: Threat actors drop the mic with karaoke hack: Get the show notes here: Huge thanks to our episode sponsor, Guardsquare Your backend is only as secure as your frontend. Research shows that client-side compromise is now a primary driver of...
info_outline
Anthropic restricts Claude, Google Calendar phishing, FBI hack arrest
Cybersecurity Headlines
CISA’s KEV catalog grows by five Calendar phishing becomes a thing Canadian cybersecurity executive arrested in FBI hack Hackers abuse Google Ads, Bing redirects to deliver Claude ClickFix attacks https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/ Biosensor firm iRhythm announces data breach numbers https://therecord.media/irhythm-data-breach-reports Japan confirms arrest of Russian Qilin operative https://therecord.media/japan-germany-ransomware-arrest Anthropic cuts live internet access for internal AI tests after...
info_outline
The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud
Cybersecurity Headlines
Read the full stories at . This week’s Department of Know is hosted by Rich Stroffolino, with guests , Director of the Cyber Defense and Information Assurance Program, , and , field CTO, . Missed the live show? The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at . Big thanks to our sponsor, Vanta! Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta’s automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether...
info_outlineRead the full stories at CISOSeries.com.
This week’s Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director of technology security, governance, and risk at the Cystic Fibrosis Foundation, and Jay Wilson, CISO and CIO at Insurity.
Missed the live show? Check it out on YouTube.
The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.
Big thanks to our sponsor, Vanta
Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta’s automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you’re prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.