IT Security News: Morning roundup, 2026-10-16 Summary The intersection of artificial intelligence and cybersecurity dominates this morning's news, with AI being leveraged both by threat actors to automate server exploitation and by researchers to discover critical flaws. Concurrently, global law…
AI Data Centre Operator Firmus Cancels $5bn IPO
Firmus had reportedly seen insufficient investor demand to justify offer price that sought sky-high $30bn valuation
Jev and other decision models can still be tricked with prompt injection
Never making type errors does not mean never making errors
AdFection Zero-Click Spyware Attack Hits Al Jazeera
Citizen Lab confirms that zero-click spyware infected Al Jazeera devices through targeted ads. Its investigation also exposes Discover-Tech’s global…
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…
AI Decision Models and Their Impact on AI SOC Platforms
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System…
Data-Centric Security with Hardware-Backed Encryption: How Virtru and Thales Protect Sensitive Data
Data-Centric Security with Hardware-Backed Encryption: How Virtru and Thales Protect Sensitive Data lee.potok@thal… Wed, 10/14/2026 – 09:44 Virtru and…
Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat
Cannabis smuggling from North America and Thailand in Europe has seen a sharp rise, driven by oversupply in legal markets and the adaptability of…
Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns
Three weeks before Americans vote in the 2026 midterm election, fraudsters are borrowing candidate names, logos and slogans to collect fake donations and…
“Spray and pray” job applications could make it harder for you to spot a scam
Sending out lots of job applications without keeping track could make a scammer’s message look like a reply you’ve been waiting for.
Google Automatically Adds Your Phone Number to Every Google Account on Your Android Phone
Google automatically verifies phone numbers on Android devices and adds them to every Google account signed in on the Phone. The setting is enabled by…
Chinese Phishing Network Uses 17,000 Domains to Target Japanese Banks and Steal Credentials
A large Chinese-language phishing operation has used around 17,000 internet domains to impersonate banks, payment services, retailers and other well-known…
BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts
A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week.
New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials
Aoki, also known as Aokigahara, is a data-stealing malware that has added credentials for AI tools to its growing list of targets. Recent versions seek…
IT Security News Hourly Summary 2026-10-16 14h : 11 posts
11 posts published in the last hour 11:31Backdooring Open-Weight AI Models 11:31BAE Systems Cybersecurity Incident Disrupts Bankruptcy Court Operations Across the U.S. 11:31Protecting citizens, preserving rights 11:02OpenAI sued over children safety and data use 11:02Panchan’s Mining Island [Guest Diary], (Wed,…
Backdooring Open-Weight AI Models
This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an…
BAE Systems Cybersecurity Incident Disrupts Bankruptcy Court Operations Across the U.S.
A cybersecurity incident at defense contractor BAE Systems has taken offline the systems that send bankruptcy notices for every federal bankruptcy court…
Protecting citizens, preserving rights
How can law enforcement make effective use of data and technology while ensuring that fundamental rights and the rule of law remain protected? This…
OpenAI sued over children safety and data use
Eight US states and a mother of two accuse the ChatGPT maker of putting children’s safety and privacy at risk.
Panchan’s Mining Island [Guest Diary], (Wed, Oct 14th)
[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks…
Srsly Risky Biz: Russia’s digital detox boomerang
Tom Uren and Amberleigh Jack talk about Russian targeting of Ukrainian data centres. That’s not good, but it looks like Russia is very poorly prepared for…
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts.
ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138,…
OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks
Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report.