New SharePoint exploit, Australian OpenAI hack developments, Kiteworks urges stoppage
Release Date: 09/28/2026
PHP emergency patches, compromised TLS certificates, Signal hot mic bug
Cybersecurity Headlines
PHP rushes out emergency fixes for PHP2Shell Compromised certificates trigger internet cleanup Signal calls could stay live after you hang up OpenAI agents disable safeguards during coding tasks Plex2Shell attacks hit media servers Poisoned LiteLLM update steals secrets & adds a backdoor Meta faces a big Cambridge Analytica penalty Chrome adds ClickFix warnings and checks insecure connections Get the show notes here: Huge thanks to our episode sponsor, ThreatLocker AI is compressing the timeline between initial access and impact. That leaves security teams less time to...
info_outline
Naval hack, Muse exposes secrets, Army researching offensive AI hacking
Cybersecurity Headlines
Russian-linked attacks hit naval shipbuilder Muse exposes secrets when sharing chats Army Cyber Command looking to offload attacks to AI DeepSeek booted from federal agencies DHS asked CISA to hack voting machine EU doesn’t require patching hacked freezers Cairn platform abused by threat actors Security Week: Reuters: Palo Alto still seeing active PAN-OS exploits LLMs getting better at COBOL Get the show notes here: Huge thanks to our episode sponsor, ThreatLocker Attackers do not always bring their...
info_outline
OpenCode keys exposed, AI agents raid websites, Rank Math backdoor
Cybersecurity Headlines
OpenCode breach exposes users’ AI keys One hacker puts AI agents to work on 1,200 sites Rank Math PRO updates deliver a persistent backdoor Nikkei discloses its third breach in a month Microsoft adds controls for rogue AI agents ClickFix attackers borrow Siemens’ signature Pegasus targets Serbian government critics before elections Bullhorn takes staffing platform offline after attack Get the show notes here: Huge thanks to our episode sponsor, ThreatLocker An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the...
info_outline
Cybersecurity jobs report, ConnectWise suspends cloud backup, Drupal patches flaws
Cybersecurity Headlines
Cybersecurity jobs report reveals mixed bag https://cybersn.com/resources/reports/cybersecurity-jobs-report ConnectWise Suspends cloud backup after supply chain attack Drupal patches critical RCE flaws, warns of exploits Chinese espionage attackers suspected of BeyondTrust zero-day https://therecord.media/beyond-trust-cyberattack-china Proofpoint to acquire Varonis’ data security Burger King Japan data breach exposes 11 million customer records BAE Systems cyberattack disrupts US federal court operations CikaBika Bot RAT abuses Discord Get the show notes here:...
info_outline
The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware
Cybersecurity Headlines
See the full stories at This week’s Department of Know is hosted by Rich Stroffolino, with guests , vp and CISO, , and , CISO, . Missed the live show? The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at . Huge thanks to our sponsor, Guardsquare Mobile security incidents are no longer the exception—they are the norm. Last year, seventy-two percent of companies suffered a mobile app security incident. As the primary gateway to your APIs and data, your mobile app requires more than just basic encryption; it needs a...
info_outline
Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers
Cybersecurity Headlines
CenterPoint Energy reveals data breach numbers Zero-Click Candiru spyware infections at Al Jazeera tracked to targeted online ads UK Legal Aid Agency Hack Scope Widens After Forensic Review Bank of America needed 1,000 contractors to patch bugs found by Mythos Microsoft takes down 3 major China-based phishing platforms Windows Server 2022 reaches end of mainstream support Senators press for AI safety and security French supermarket refrigeration attack widens Get the show notes here: https://cisoseries.com/cybersecurity-news-october-16-2026/ Huge thanks to our episode sponsor,...
info_outline
FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack
Cybersecurity Headlines
FBI shuts down North Korean laptop farms Meta’s stolen credentials open GitHub repositories Cisco email gateways face active attacks Ledger tells Asian sellers to stop sales CISA urges Ivanti VPN updates Microsoft’s patch count breaks the annual record Six days, three Chrome bugs, one sandbox escape Windows gets its Always On VPN back Get the show notes here: Huge thanks to our episode sponsor, Guardsquare AI is speeding up development, but at what cost? While ninety-six percent of teams now use AI tools, eighty-one percent report that AI-generated code has introduced new...
info_outline
Webcams go to war, Kimsuky sends invites, Anthropic blocks copycats
Cybersecurity Headlines
Webcams get drafted into war Kimsuky’s invitations come with malware Anthropic makes copycats work harder Adobe’s patch pile hits 140 Scam crackdown nets 28 arrests Fashion brands hit an IT snag npm closes a name-stealing loophole Chrome bug bounties bounce back Get the show notes here: Huge thanks to our episode sponsor, Guardsquare Is your mobile app truly protected? Relying on the OS isn’t enough. A global study of thirteen-hundred security and developer leaders found that ninety-six percent of teams using layered protection reported significantly fewer security incidents....
info_outline
Supermarket freezer hack, Ahold Delhaize offline, spy chip in crypto wallets
Cybersecurity Headlines
Hackers turn up the heat on French supermarkets: Ahold Delhaize offline after cyber attack: Spy chip used in crypto wallet thefts: Russian digital services disrupted from drone strike: Microsoft wants AI “emergency brakes”: UK’s AI Security Institute to get early model access: and Threat actors trying to use critical SonicWall SMA flaw: Threat actors drop the mic with karaoke hack: Get the show notes here: Huge thanks to our episode sponsor, Guardsquare Your backend is only as secure as your frontend. Research shows that client-side compromise is now a primary driver of...
info_outline
Anthropic restricts Claude, Google Calendar phishing, FBI hack arrest
Cybersecurity Headlines
CISA’s KEV catalog grows by five Calendar phishing becomes a thing Canadian cybersecurity executive arrested in FBI hack Hackers abuse Google Ads, Bing redirects to deliver Claude ClickFix attacks https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/ Biosensor firm iRhythm announces data breach numbers https://therecord.media/irhythm-data-breach-reports Japan confirms arrest of Russian Qilin operative https://therecord.media/japan-germany-ransomware-arrest Anthropic cuts live internet access for internal AI tests after...
info_outlineAnother Microsoft SharePoint flaw now exploited
Details and doubts emerge regarding OpenAI hack of Australian Health portal
Kiteworks urges customers to stop using platform
Get the show notes here: https://cisoseries.com/cybersecurity-news-new-sharepoint-exploit-australian-openai-hack-developments-kiteworks-urges-stoppage/
Huge thanks to our episode sponsor, Intezer
