Using vibe coding to scratch an itch has many of the same issues as using low-code and no-code development tools. That’s not surprising. Putting together…
Open-source security rests on understanding risks, scaling fixes
Developers should coordinate security work to make the most of their interconnected ecosystem, IBM said in a new report.
OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract
OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its…
Burger King Japan Data Breach Impacted 11 Million Customers
Burger King Japan disclosed a breach exposing 11.18 million app users’ personal data after attackers accessed its membership system in early October.…
Your AI agent needs more than memory. It needs reliable state
Most teams building AI agents are pouring effort into better memory, longer context windows, conversation summaries, retrieval systems that pull up…
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
Overview On October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229 , an integer overflow in its CI/CD regular-expression…
UK Legal Aid Agency: Hackers stole records dating back to 1978
The Legal Aid Agency (LAA), an executive agency of the UK’s Ministry of Justice that manages the country’s Public Defender Service, says attackers who…
Researchers Demonstrate iOS 27.0.1 Untethered Jailbreak on iPhone 18 Pro
Security researchers from Calif (Calif.io) demonstrated a working untethered jailbreak on iOS 27.0.1 running on an iPhone 18 Pro. They showed it live at…
ICO Reprimands Met Over Third-Party Data Leak
The ICO has handed the Metropolitan Police a reprimand and enforcement notice after privacy failings linked to the Auror platform
Securing AI Agents from Discovery to Runtime: Check Point on Google Cloud’s Gemini Enterprise
AI agents are moving into production fast. They read enterprise data, call tools, and take actions across business systems. That creates a new problem: an…
Eiliko robot companion exposes private chats and can be hijacked
A researcher found serious flaws in Eiliko’s security, exposing private conversations and allowing remote changes to what the robot says.
Progress Warns of MOVEit Transfer Vulnerabilities Allowing Authentication Bypass and Privilege Escalation
Progress Software has released fixes for 12 vulnerabilities in MOVEit Transfer, its managed file transfer (MFT) platform. Several of the flaws allow…
IT Security News Hourly Summary 2026-10-16 17h : 14 posts
14 posts published in the last hour 14:32Cyber Briefing: 2026.10.16 14:32Integrated Security Operations Center (ISOC): What It Means 14:32F5 addressed critical RCE flaws in NGINX 14:31Threats Making WAVs – Incident Response to a Cryptomining Attack 14:31In Other News: ICS-Sniper Attack,…
Cyber Briefing: 2026.10.16
Cloned voices, fake recruiters and a court-system breach show how trust became this week’s biggest attack surface.
Integrated Security Operations Center (ISOC): What It Means
Learn what an Integrated Security Operations Center (ISOC) means for SOC teams, including its core capabilities, trade-offs, and role in Sekoia’s approach.
F5 addressed critical RCE flaws in NGINX
F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application…
Threats Making WAVs – Incident Response to a Cryptomining Attack
Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report…
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
Forescout uncovers ROMULUS malware delivery platform behind ClickFix attacks
Forescout’s Vedere Labs has identified a previously undocumented malware delivery platform being used in ClickFix campaigns, alongside new delivery…
Metropolitan Police’s unchecked use of shoplifting platform lands force in trouble with data watchdog
Officers unlawfully uploaded 179 people’s details to Auror without required privacy checks or corporate approval
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
Employees using personal ChatGPT at work? Here’s what IT admins need to do
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise…
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.