IT Security News: Morning roundup, 2026-10-14 Summary This monitoring period was dominated by unprecedented vulnerability disclosures, highlighted by Microsoft's record-breaking patch release alongside critical updates from major enterprise software vendors. Meanwhile, infrastructure attacks against physical systems and corporate supply chains…
FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited
FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited David Shipley covers major cybercrime and safety headlines:…
Ivanti Connect Secure 0-Days Exploited to Steal Active Directory Credentials
Attackers chained three zero-day flaws in Ivanti Connect Secure VPN appliances to gain root-level access without logging in, then searched for credentials…
Risky Bulletin: ShinyHunters suspects arrested in US and Jordan
Two ShinyHunters suspects arrested in Jordan and the US, hackers breach TLD registrars to get valid Google certs, Japanese authorities arrest a Qilin…
ISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132, (Mon, Oct 12th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132,…
Chainguard Harness uses frontier AI to test running applications for vulnerabilities
Chainguard has announced Chainguard Harness, a new cyber harness that uses frontier AI models like Anthropic’s Claude Mythos 5.1 to find and fix…
Passkey Authentications Double but Adoption Remains Slow
Dashlane data finds that passkey adoption is growing but not quickly enough
Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws
Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on October…
Seven ways to encourage critical thinking in AI users
Employees are increasingly using large language models (LLMs) and AI agents to get work done. Many are using agents to complete tasks, and others are…
CrowdStrike Expands Federal SOC Modernization Through CISA-Funded SIEMaaS
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Expands Federal SOC Modernization Through CISA-Funded SIEMaaS
Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft
Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and…
Multiple Google Chrome Flaws Could Enable Memory Corruption and Code Execution Attacks
Google released a Chrome security update that addresses 37 vulnerabilities, including seven critical flaws that raise concerns about memory corruption and…
SolarWinds Avior pairs IT automation with human approval and audit trails
SolarWinds has announced the launch of Avior, a standalone, goal-oriented agentic AI system purpose-built for mission-critical IT environments. Built on…
Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet
Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single malicious…
It’s time to rewrite all that old code
The first substantial software project I ever undertook (at least it seemed substantial at the time) was porting the famous text-based Star Trek game from…
Gears of War: E-Day Hit by DDoS Attack, Causing Login Failures and Disconnects
Gear of War: E-Day players faced login failures, sudden disconnects, and other online service problems after distributed denial-of-service attacks…
What building an Android weather app taught me about designing for reliability
I spent 13 years building Android apps, and for most of them, the backend was someone else’s problem. Building Weather Pal, my own forecast app, broke…
Scytale MCP gives AI tools scoped, read-only access to compliance data
Scytale has announced the launch of Scytale MCP, a Model Context Protocol server that connects a customer’s AI tools directly to their compliance program.…
The value of software is approaching $0
Imagine a vendor comes to you and explains how they can dramatically de-risk your infrastructure. They have a new software product or SaaS that detects…
Google Awarded a $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6
XBOW says its security researchers earned a $250,000 reward from Google after building a full-chain Chrome exploit with AI agents. The team says the work…
Friday Squid Blogging: I Caught a Squid
On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod (none of which we could keep), and a bunch of hake and…
OpenAI engineer charged after boardroom bug found wrapped in toilet paper
FBI alleges covert recorder was plugged into a TV, with a second device later discovered in the employee’s bag
Fake WatchGuard VPN Site Steals Credentials Then Delivers Legitimate Signed Installer
A WatchGuard VPN impersonation attack that steals connection credentials in the browser before delivering the vendor’s genuine, digitally signed…
French Supermarket Cyber-Attack Impacts More Refrigeration Controllers
At least two French supermarkets using temperature regulation devices from Dixell Electronics also experienced food stock disruptions
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux’s vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one…