IT Security News Roundup: 2026-10-16 Morning

IT Security News: Morning roundup, 2026-10-16

Summary

The intersection of artificial intelligence and cybersecurity dominates this morning's news, with AI being leveraged both by threat actors to automate server exploitation and by researchers to discover critical flaws. Concurrently, global law enforcement and industry coalitions struck major blows against cybercrime infrastructure, disrupting massive phishing networks and state-sponsored worker farms. Critical zero-day vulnerabilities in enterprise software and major strategic acquisitions further underscore the urgent need for continuous defense across modern digital ecosystems.

1. AWS Security introduced AWS Continuum to integrate continuous automated penetration testing into CI/CD pipelines, helping developers confirm exploitability alongside traditional analysis tools.
2. Proofpoint announced a $6.3 billion all-cash acquisition of Varonis Systems to integrate email, data, and AI security into a unified protection platform.
3. A security analysis highlights that public Instagram downloader services operate as web parsers rather than tools capable of bypassing private account controls.
4. A joint report by the European Commission and Europol warns that law enforcement forensic tools and resources are struggling to keep up with growing digital evidence volumes.
5. Russian-speaking hackers deployed over 400 AI agents via OpenAI's Codex harness to breach PaperCut servers across hundreds of organizations and harvest Windows credentials.
6. A cyber incident affecting defense contractor BAE Systems disrupted several services managed by the U.S. Bankruptcy Noticing Center.
7. Cybercrime marketplace Yam Store provided infrastructure and phishing kits that enabled threat actors to distribute more than one billion malicious messages globally.
8. Flock CEO Garrett Langley denied reports that the surveillance company has canceled services or terminated contracts with law enforcement agencies despite public concerns.
9. A UK school reported a data protection incident after a burglar stole SD cards containing photographs and personal data of students.
10. CISA added a high-severity PAN-OS code injection vulnerability (CVE-2026-0322) to its Known Exploited Vulnerabilities catalog following active exploitation.
11. A critical unauthenticated command injection flaw in Collabora Online's CODE Server allows remote attackers to execute arbitrary commands on Nextcloud servers.
12. A vulnerability in Claude Code Desktop's preview pane allows attackers to silently exfiltrate sensitive developer credentials, including SSH keys and AWS tokens.
13. Chinese state-sponsored hackers exploited a zero-day flaw in BeyondTrust Remote Support to gain root privileges and install persistent backdoors months before disclosure.
14. Security researchers detailed methods where attackers bypass LLM safety classifiers by splitting malicious requests across multiple aggregated queries.
15. Microsoft and industry partners took legal and operational action to dismantle the CoGUI phishing kit infrastructure responsible for over 100 million scam emails monthly.
16. Nearly 500 AI researchers signed an open letter urging governments to enforce strict containment standards, such as air-gapping, for cyber-capable AI model training.
17. Russian threat group Midnight Blizzard utilized Anthropic's Claude AI to rewrite malware code and evade security detection during European cyber-espionage operations.
18. Microsoft collaborated with global partners to disrupt three major phishing kit operations—CoGUI, Haozi, and Iron Man System—behind over one billion fraudulent emails.
19. Google released new AI-backed features on Android designed to detect imposter calls and block fraudulent messaging attempts in real time.
20. A new security industry evaluation ranked top data classification tools, placing BigID at the top spot followed by Microsoft Purview.
21. Microsoft disclosed that the October KB5127648 update for Windows 11 may prevent users from enabling the Smart App Control security feature.
22. An industry report ranked leading enterprise tokenization vendors, naming Protegrity as the top solution for analytics-preserving data protection.
23. Security researchers used an AI research harness to uncover CVE-2026-99999, a critical Linux networking stack flaw that allows guest virtual machines to escape to the host.
24. Threat group ARMORY CASTLE exploited a BeyondTrust zero-day vulnerability since August to gain full admin privileges and erase security logs to mask their presence.
25. U.S. authorities arrested two citizens and seized nearly 187 laptops during raids targeting North Korean IT worker schemes linked to the Famous Chollima group.

Summaries written with AI (Google Gemini) from the linked source articles.

Sources in this roundup

Most-mentioned keywords

Sources

1. Penetration testing every deployment with AWS Continuum
2. Proofpoint to Acquire Varonis in Massive $6.3 Billion AI Cybersecurity Deal
3. Private Instagram Downloaders Are Parsers, Not Privacy Bypass Tools
4. Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
5. Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows Credentials
6. Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing
7. Yam Store: The Phishing Network Behind a Billion Messages
8. Flock CEO: We haven’t ‘fired’ any police departments as customers
9. Thief snatches school snapper's SD cards in smash & grab
10. CISA Warns of Palo Alto Networks PAN-OS Code Injection Vulnerability Exploited in Attacks
11. Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud Servers
12. Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
13. Chinese Hackers Exploit BeyondTrust Zero-Day to Gain Root Access and Deploy Backdoors
14. Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
15. Microsoft Disrupts CoGUI Phishing Kit Linked to Over 100 Million Malicious Emails a Month
16. Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say
17. Midnight Blizzard-Linked Hackers Use Claude AI to Rebuild Malware and Evade Detection
18. Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
19. Android adds AI-powered scam alerts, hangs up on bank impostors
20. Top 10 Best Data Classification Tools in 2026 [Ranked & Scored]
21. Microsoft: October Windows update may break Smart App Control
22. Top 10 Best Tokenization Solutions in 2026 [Ranked & Scored]
23. Researchers Use AI to Discover Critical Linux Kernel Flaw That Enables Virtual Machine Escape
24. BeyondTrust 0-Day Vulnerability Exploited Since August to Gain Full Admin Access in Minutes
25. FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested