IT Security News: Morning roundup, 2026-10-17 Summary Artificial intelligence dominates this period as both a powerful defense mechanism and an emerging vector of vulnerability, with research demonstrating AI's ability to solve decades-old cryptographic mysteries while state-sponsored threat actors actively leverage…
Luna Moth
How a Data-Extortion Crew Runs Like a Call Center
What a Sentence Forgets: Preserving Context in Document Ingestion
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: What a Sentence Forgets: Preserving Context in Document Ingestion
IT Security News Hourly Summary 2026-10-17 15h : 9 posts
9 posts published in the last hour 12:31Encryption Is Getting Squeezed From All Sides 12:31Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups 12:31Cyber Briefing: 2026.10.15 12:02Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching…
Encryption Is Getting Squeezed From All Sides
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.
Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off…
Cyber Briefing: 2026.10.15
Attackers are abusing trusted platforms and AI to evade detection, while a major government data breach and an alleged corporate espionage case show that…
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a…
Cybercrims go beyond stealing data to attack physical building systems
‘Hold my beer, have fun getting into your offices’
Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site’s server, and fixes were shipped on October 14 in…
Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts
Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 partner and customer tenants, giving them access through a…
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three…
IT Security News Hourly Summary 2026-10-17 14h : 7 posts
7 posts published in the last hour 11:31MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon 11:31BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week 11:31Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery…
MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX.…
BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week
A cyber incident at a BAE Systems subsidiary just stopped every bankruptcy court in the US from sending notices, and the problem started a week ago. A…
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets.
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited…
Cyber Incident at BAE Systems Disrupts Critical US Judicial Services
In response to an incident involving BAE Systems, bankruptcy-related services across US federal courts have been disrupted, halting the production and…
NordVPN CTO on NGAV and AI-era security
NordVPN has introduced what it calls next-generation antivirus (NGAV), a security product designed to address threats that have evolved far beyond…
IT Security News Hourly Summary 2026-10-17 13h : 6 posts
6 posts published in the last hour 10:31Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified 10:06IT Security News Roundup: 2026-10-17 Morning 10:02YouTube adds AI-generated music labels 10:01Microsoft: Windows Server 2022 reached end…
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
CEO said the workers were hired in Q2 and are still helping today
YouTube adds AI-generated music labels
YouTube has begun rolling out a new labeling system that identifies music tracks created or modified using artificial intelligence.
Microsoft: Windows Server 2022 reached end of mainstream support
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. […]
UK Legal Aid Agency breach exposes 250K records from 1978
The UK government revealed that a cyberattack on the Legal Aid Agency in April 2025 compromised far more historical data than initially disclosed, with…
IT Security News Hourly Summary 2026-10-17 12h : 10 posts
10 posts published in the last hour 09:31AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns 09:31France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack 09:31Saudi OpenAI engineer charged with planting spy device 09:31Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic…