IT Security News Roundup: 2026-10-21 Evening

IT Security News: Evening roundup, 2026-10-21

Summary

The cybersecurity landscape over this period is heavily defined by the rapid emergence and weaponization of agentic AI alongside widespread foundational software vulnerabilities. Organizations are struggling to govern autonomous AI workflows while threat actors deploy advanced AI frameworks to automate large-scale supply chain attacks. At the same time, critical zero-day flaws and patch releases for core software like PHP and GitLab demand immediate remediation to protect exposed networks. Staying ahead of these interconnected operational and technological threats is crucial for securing enterprise infrastructure against increasingly agile adversaries.

1. Recruitment platform giant Bullhorn brought in CrowdStrike to investigate a cyberattack that disrupted service and raised concerns about potential customer data theft.
2. Guardicore security researchers analyzed a cryptomining campaign that concealed malicious code within WAV audio files to propagate across data center networks undetected.
3. Cisco Talos warned that eight intermediate certificates belonging to certificate authority eMudhra were compromised, risking the integrity of secure web connections.
4. Ocean Security identified a phishing campaign called Phantom Preview that abuses legitimate Frame.io notifications to trick users into revealing Microsoft 365 credentials.
5. Severe vulnerabilities in PHP forced several European government websites offline to prevent active exploitation and safeguard public sector digital infrastructure.
6. Marvell, Microsoft, and Oracle joined forces to standardize integrated Hardware Security Modules to NIST FIPS 140-3 Level 3 standards across cloud data centers.
7. Microsoft reported that Russian threat actor Storm-0940 weaponized ARTEX agentic AI tools to breach ConnectWise and hijack enterprise Microsoft 365 credentials.
8. A report from Splunk revealed that rapid organizational adoption of autonomous AI agents is creating significant operational risk due to a lack of governance.
9. ConnectWise mandated password resets and administrative credential replacements after unauthorized access was detected within its Cloud Backup service.
10. North Korea's Lazarus Group is incorporating post-quantum cryptography to encrypt and secure malicious payload delivery in recent multi-stage operations.
11. The Go programming team issued an emergency update blocking eight intermediate certificate authority keys due to undisclosed security risks.
12. Microsoft released new security controls designed to monitor autonomous AI agents and automatically restrict their access if they exhibit unauthorized behavior.
13. Enterprise security teams face growing risks as employees deploy unmonitored AI workflows and shadow automations without standardized administrative governance.
14. A survey by the Cloud Security Alliance found that standard data loss prevention tools successfully block major data breaches prior to exfiltration only 16 percent of the time.
15. Zscaler ThreatLabz detailed a global hacking campaign utilizing the ARTEX framework and multiple large language models to automate network reconnaissance and data theft.
16. Russian hacking group APT28 breached a NATO naval shipbuilder to deploy the HOOKEDGE backdoor alongside a novel reflective loader.
17. Security guidance highlights crucial steps for securing Retrieval-Augmented Generation AI implementations against prompt injection attacks and unauthorized data leaks.
18. WhatsApp removed hidden code from its help pages that instructed its AI chatbot not to direct users to data protection regulators.
19. A cyberattack on a hosting provider exposed over 400,000 internal emails from Germany's AfD political party, which were subsequently published online with AI summaries.
20. Delaying the updated HIPAA Security Rule to 2027 leaves healthcare providers exposed to cyber threats if they postpone urgent infrastructure upgrades.
21. Meta faced privacy backlash after smart glasses were discovered recording user conversations without hearing a wake phrase or providing clarification.
22. GitLab released urgent emergency patches for a CVSS 10.0 flaw impacting all software versions since 2014 that allows unauthenticated remote code execution.
23. Security teams are rushing to patch critical PHP2Shell vulnerabilities as technical details circulate and active exploitation attempts escalate across the web.
24. A consumer summary highlights upcoming Black Friday discount offers on Samsung Galaxy smartphones, tablets, and smartwatches.
25. A leaked document revealed that Cellebrite developed a wireless device that uses potential zero-day radio exploits to bypass iPhone security.

Summaries written with AI (Google Gemini) from the linked source articles.

Sources in this roundup

Most-mentioned keywords

Sources

1. Bullhorn sees red after cyberattack knocks recruitment platform offline
2. Threats Making WAVs – Incident Response to a Cryptomining Attack
3. Compromised eMudhra intermediate certificates
4. Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials
5. PHP Vulnerability Fallout After European Government Websites Go Offline
6. Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
7. AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
8. AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds
9. ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident
10. Lazarus hackers use post-quantum cryptography for malware delivery
11. Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
12. Microsoft's New Security Tools Can Restrict AI Agents That Go Off Track
13. What Security Teams Can Do To Tame Wild Code
14. Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
15. Inside a Global AI-Assisted Hacking Campaign
16. Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
17. RAG Security: Protecting Retrieval-Augmented Generation Systems
18. WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators
19. AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive
20. HIPAA Security Rule Delayed to 2027: Why Healthcare Can’t Wait
21. Meta glasses caught recording conversations without wake phrase
22. Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
23. 'PHP2Shell' Bugs Signal Red Alert for Security Industry
24. Samsung Black Friday 2026: Galaxy Offers to Look Out For
25. Possible new Cellebrite iPhone Radio Zero-Day