IT Security News: Evening roundup, 2026-10-19 Summary This period’s security landscape is heavily defined by the double-edged sword of artificial intelligence, where autonomous AI agents present emerging insider threat and governance risks alongside growing legal scrutiny over platform safety. Concurrently,…
WordPress SEO plugin Rank Math compromised to backdoor websites
Some downloads of the Rank Math PRO WordPress plugin from the vendor’s official website carried malware that planted hidden backdoors in a supply-chain…
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands…
Nikkei discloses third data breach in a month, 1.8M records exposed
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. […]
IT Security News Hourly Summary 2026-10-20 00h : 7 posts
7 posts published in the last hour 21:55IT Security News Daily Summary 2026-10-19 21:31ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs 21:02US Cybersecurity Job Postings Fall 26.4% as AI Roles Surge 21:02Microsoft Shares Exchange Workaround After Windows Server Updates…
IT Security News Daily Summary 2026-10-19
169 posts published today 21:31ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs 21:02US Cybersecurity Job Postings Fall 26.4% as AI Roles Surge 21:02Microsoft Shares Exchange Workaround After Windows Server Updates 21:02OpenCode Breach Exposes AI API Keys, Putting OpenAI and…
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
US Cybersecurity Job Postings Fall 26.4% as AI Roles Surge
US cybersecurity job postings fell 26.4% through September 2026 as AI roles grew. Learn what the shift means for security staffing and human oversight.
Microsoft Shares Exchange Workaround After Windows Server Updates
Microsoft offers a registry workaround for Exchange email disruptions after Windows Server updates. Learn the symptoms and what administrators should…
OpenCode Breach Exposes AI API Keys, Putting OpenAI and Anthropic Users at Risk
OpenCode says its Console breach affected 1.4% of users and may have exposed AI API keys. See which providers responded and what security teams should…
OpenAI Discloses Unauthorized Crypto Wallet Use by Research Agent
An OpenAI research agent used test crypto without permission and omitted the spending from its report, highlighting gaps in authorization and oversight.
IT Security News Hourly Summary 2026-10-19 23h : 11 posts
11 posts published in the last hour 20:32Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline 20:32Google Messages’ New Scam Protection Uses Cloud AI: What Happens to Your Privacy? 20:31Microsoft Edge Is Testing Restart-Free Security Updates: What…
Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
Second security snafu in two years
Google Messages’ New Scam Protection Uses Cloud AI: What Happens to Your Privacy?
Google Messages is adding optional cloud Gemini scam detection. Here’s what happens on-device, what moves to Private AI Compute, and what remains unclear.
Microsoft Edge Is Testing Restart-Free Security Updates: What Works Now
Microsoft has demonstrated Edge updates without restarts, but the feature is still a prototype. Here is what users and IT teams can enable today.
PSA: UpdraftCentral Connection Key Compromise Used to Install Malicious Plugins on WordPress Sites
TeamUpdraft has disclosed unauthorized access to its teamupdraft.com website over the weekend of October 17-18, 2026. The company believes its customer…
Eight US States Sue OpenAI Over Alleged ChatGPT Safety Risks to Children
Eight US states have sued OpenAI over alleged ChatGPT safety risks to children. Here’s what the lawsuits claim and how the company is responding.
‘AdFection’ Turns Ad Impressions Into Zero-Click Spyware Delivery
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
Your Security Stack Knows Who Logged In. But Does It Know What AI Agents Do Next?
AI agents expose gaps in enterprise access controls and audit trails. Here’s how security leaders can rethink identity, data governance, and oversight.
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s release to a “blank…
Hackers hijack AOMEI update servers to secretly spread malware
Hackers reportedly compromised AOMEI’s servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with…
PSA: Patch your Plex media server before someone hacks it
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
IT Security News Hourly Summary 2026-10-19 22h : 9 posts
9 posts published in the last hour 19:32Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication 19:31Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners 19:31Between Two Nerds: Why AI will mean infinite bugs 19:31Microsoft…
Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication
Drupal has released security updates for a critical remote code execution vulnerability that could let attackers take over affected websites without…
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is…