Russian-linked attacks hit naval shipbuilder
https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html
Muse exposes secrets when sharing chats
https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversations/
Army Cyber Command looking to offload attacks to AI
https://web.archive.org/web/20261020134149/https://theintercept.com/2026/10/19/army-autonomous-ai-agents-arcyber/
DeepSeek booted from federal agencies
https://www.wsj.com/tech/ai/dhs-orders-deepseek-technology-removed-from-federal-civilian-it-systems-060b6d3d?st=m6DV2n
DHS asked CISA to hack voting machine
https://www.propublica.org/article/cisa-election-security-donald-trump
EU doesn't require patching hacked freezers
https://therecord.media/eu-cyber-law-wont-force-fixes-for-fridges-in-french-attack
Cairn platform abused by threat actors
Security Week: https://www.securityweek.com/ai-platform-cairn-abused-to-hack-over-100-organizations/
Reuters: https://www.reuters.com/legal/government/how-one-hacker-used-ai-agents-few-thousand-dollars-break-into-scores-sites-2026-10-19/
Palo Alto still seeing active PAN-OS exploits
https://thehackernews.com/2026/10/qilin-and-inc-ransomware-groups-exploit.html
LLMs getting better at COBOL
https://openai.com/index/low-resource-programming-languages/
Get the show notes here: https://cisoseries.com/naval-hack-muse-exposes-secrets-army-researching-offensive-ai-hacking/
Huge thanks to our episode sponsor, ThreatLocker
Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted applications can reach and what they can do. Learn how ThreatLocker applies this principle at threatlocker.com/ciso today.
Read the original article: