IT Security News: Afternoon roundup, 2026-10-18 Summary This afternoon's developments highlight the rapidly shifting frontier of artificial intelligence alongside persistent infrastructure vulnerabilities and insider threats across global organizations. As federal security agencies urge tighter containment for autonomous AI models and…
Irish police force has its Twitter hacked in cryptocurrency scam
There must have been red faces in the social media department of Ireland’s police headquarters after two of its accounts were hijacked this week. Read…
IT Security News Hourly Summary 2026-10-18 21h : 3 posts
3 posts published in the last hour 18:02The Lawful Access Act’s threats to Canada’s national security 18:02Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France 18:02OSCP Exam Guide: What to Expect and How to Prepare
The Lawful Access Act’s threats to Canada’s national security
Kate Robertson warns that Bill C-22 poses risks to Canada’s national security in this piece for The Globe and Mail.
Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France
Five suspects linked to the organisation and recruitment of serious violence have been arrested in Spain, Morocco, and France, in the latest results of…
OSCP Exam Guide: What to Expect and How to Prepare
Learn what to expect from OSCP, including format, requirements, scoring, practical study tips, and answers to common preparation questions.
AI Can Hijack Industrial Systems in 16 Minutes
Frontier AI models can move from an enterprise network into operational technology (OT) systems and take physical control of industrial equipment in as…
Compromised ConnectWise OAuth App Exposes Over 170 Microsoft 365 Tenants in Supply Chain Attack
A compromised credential tied to a ConnectWise cloud backup application has allowed threat actors to access more than 170 Microsoft 365 environments…
Hackers exploit SiteGuard WAF flaw to run commands as admins
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected…
Volatility 3 Command Cheat Sheet for Incident Response
By HOC Team | Updated: October 2026 | Read time: ~17 min Memory forensics is the crown jewel…
Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected…
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial…
Agencies Call for Stronger Cybersecurity in Frontier AI Testing
U.S. federal agencies have issued voluntary guidelines for U.S. companies developing artificial intelligence, recommending they improve security measures…
Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)
Here is the YARA rule I used to detect “Orphaned VBA Projects Inside DWG Files”.
IT Security News Hourly Summary 2026-10-18 15h : 3 posts
3 posts published in the last hour 12:31Rust-Based CikaBika Bot Turns Discord into a Command Center 12:01CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment 12:00IT Security News Hourly Summary 2026-10-18…
Rust-Based CikaBika Bot Turns Discord into a Command Center
CikaBika Bot uses fake documents to infect Windows systems, then abuses Discord and Ngrok to execute commands, spy on victims, and steal files. Darktrace…
CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint…
IT Security News Hourly Summary 2026-10-18 14h : 3 posts
3 posts published in the last hour 11:31More NHS staff sacked for accessing records of Nottingham stabbing victims 11:31US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars 11:01Krybit ransomware: what you need to know
More NHS staff sacked for accessing records of Nottingham stabbing victims
Ellie Ng reports: More NHS staff have been dismissed for inappropriately accessing medical records of the Nottingham stabbing victims, taking the total…
US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars
CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag.
Krybit ransomware: what you need to know
Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted,…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter…
IT Security News Roundup: 2026-10-18 Morning
IT Security News: Morning roundup, 2026-10-18 Summary Identity management and ecosystem vulnerabilities take center stage in this morning's roundup, as compromised credentials and third-party integrations threaten both enterprise infrastructure and user privacy. From cloud backup platforms to developer AI workspaces,…
Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email…
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown…