IT Security News: Evening roundup, 2026-10-15 Summary This reporting window highlights a dangerous shift toward zero-click attacks delivered through online advertising networks, alongside an unprecedented operational burden underscored by Microsoft's record-breaking patch release. Simultaneously, security teams and nation-states are grappling…
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
I believe the cybersecurity industry may be approaching AI security the wrong way.
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Quebec, Canada. The event…
IT Security News Hourly Summary 2026-10-16 03h : 3 posts
3 posts published in the last hour 00:31TypeSafe’s Jev ‘even more susceptible to attack’ than LLMs, says security vendor 00:01Spyware infects journalists through unclicked ads, Palo Alto firewall zero-day exploited, OpenAI engineer charged with bugging exec room 00:00IT Security News…
TypeSafe’s Jev ‘even more susceptible to attack’ than LLMs, says security vendor
Although the Jev model rolled out last month by TypeSafe claims to have significant advantages over traditional LLMs, a security report published…
Spyware infects journalists through unclicked ads, Palo Alto firewall zero-day exploited, OpenAI engineer charged with bugging exec room
Zero-Click Spyware Ads, Palo Alto Firewall Zero-Day, Critical Drupal Flaw, and OpenAI Bugging Charge Cybersecurity Today Host David Shipley reports on…
IT Security News Hourly Summary 2026-10-16 02h : 3 posts
3 posts published in the last hour 23:01Hacker targets Ivanti Connect Secure in chained exploitation 23:01SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape 23:00IT Security News Hourly Summary 2026-10-16 01h : 7 posts
Hacker targets Ivanti Connect Secure in chained exploitation
Researchers warn the attacker is taking multiple steps to clean up forensic evidence after an attack.
SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape
The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
IT Security News Hourly Summary 2026-10-16 01h : 7 posts
7 posts published in the last hour 22:31Microsoft Patch Tuesday Fixes 1,413 Flaws: Windows Zero-Day Already Under Attack 22:31F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud 22:31AI-Powered Espionage Campaign Targets Government Linux Infrastructure 22:06IT Security News Roundup:…
Microsoft Patch Tuesday Fixes 1,413 Flaws: Windows Zero-Day Already Under Attack
Microsoft’s October 2026 Patch Tuesday fixes 1,413 vulnerabilities, including an exploited Windows zero-day and critical Outlook security flaws.
F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud
Built from decades of threat intelligence research, the new resource explains scams from the victims’ perspective and tracks emerging forms of cyber crime.
AI-Powered Espionage Campaign Targets Government Linux Infrastructure
Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft.
Six arrests for smuggling migrants via Schengen airports
Europol supported a migrant smuggling investigation involving law enforcement authorities from 17 countries. The criminal network was also engaged in…
Microsoft’s Xandr Handed Norway’s Largest Privacy Fine for Funneling Grindr User Data to Thousands of Advertisers
Norway’s data protection authority has issued its largest fine to date, hitting Microsoft-owned advertising company Xandr with a NOK 92 million ($9.6…
IT Security News Hourly Summary 2026-10-16 00h : 12 posts
12 posts published in the last hour 21:55IT Security News Daily Summary 2026-10-15 21:31Proofpoint to buy Varonis for $6.3 billion 21:318 Major Data Breaches of 2026: Millions Affected, Sensitive Data Exposed 21:31From One Account to Every Mailbox: Breaking Zimbra’s Identity…
IT Security News Daily Summary 2026-10-15
200 posts published today 21:31Proofpoint to buy Varonis for $6.3 billion 21:318 Major Data Breaches of 2026: Millions Affected, Sensitive Data Exposed 21:31From One Account to Every Mailbox: Breaking Zimbra’s Identity Boundaries (Part 1) 21:31AI Slop Isn’t Just for Social…
Proofpoint to buy Varonis for $6.3 billion
The deal pairs the email security giant’s massive threat intelligence with Varonis’ visibility into corporate data, as both companies race to secure the…
8 Major Data Breaches of 2026: Millions Affected, Sensitive Data Exposed
Explore eight major data breaches reported in 2026, including Canvas, DentaQuest, and Medtronic. Learn how many were affected and what data was exposed.
From One Account to Every Mailbox: Breaking Zimbra’s Identity Boundaries (Part 1)
An enterprise mail server authenticates users, stores private communications, delivers recovery links, runs calendars, and sends mail that employees and…
AI Slop Isn’t Just for Social Media; It’s Ruining Cyberattacks, Too
Don’t buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Hobbs and Whistles Owner Hit by Cyberattack
The owner of Hobbs, Phase Eight, and Whistles has become the latest major fashion retailer to be hit by a cyberattack. The Foschini Group (TFG) confirmed…
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online – Built-in CODE Server app…
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates
Microsoft Patch Tuesday security updates for October 2026 address a record 1,415 vulnerabilities. Prioritize the exploited zero-day, critical bugs and…