OpenCode breach exposes users' AI keys
https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/
One hacker puts AI agents to work on 1,200 sites
https://www.reuters.com/legal/government/how-one-hacker-used-ai-agents-few-thousand-dollars-break-into-scores-sites-2026-10-19/
Rank Math PRO updates deliver a persistent backdoor
https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html
Nikkei discloses its third breach in a month
https://www.bleepingcomputer.com/news/security/nikkei-discloses-third-data-breach-in-a-month-18m-records-exposed/
Microsoft adds controls for rogue AI agents
https://www.geekwire.com/2026/microsoft-unveils-tools-to-monitor-and-corral-rogue-ai-agents/
ClickFix attackers borrow Siemens' signature
https://www.securityweek.com/siemens-software-center-vulnerability-exploited-in-clickfix-malware-attacks/
Pegasus targets Serbian government critics before elections
https://therecord.media/serbia-spyware-pegasus-elections
Bullhorn takes staffing platform offline after attack
https://www.bleepingcomputer.com/news/security/bullhorn-takes-staffing-platform-offline-to-contain-cyberattack/
Get the show notes here: https://cisoseries.com/cybersecurity-news-october-20-2026/
Huge thanks to our episode sponsor, ThreatLocker
An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the payload can act. ThreatLocker approaches the problem earlier by controlling whether that code is permitted to run at all. Explore a deny by default approach for your organization at threatlocker.com/ciso.
Read the original article: