Cybersecurity Headlines

FBI shuts down North Korean laptop farms
https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/
Meta's stolen credentials open GitHub repositories
https://www.securityweek.com/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach/
Cisco email gateways face active attacks
https://thehackernews.com/2026/10/cisco-warns-of-active-attacks.html
Ledger tells Asian sellers to stop sales
https://www.bleepingcomputer.com/news/security/ledger-asks-sellers-across-asia-to-halt-sales-after-supply-chain-attack/
CISA urges Ivanti VPN updates
https://www.securitymagazine.com/articles/102655-newly-exploited-vulnerability-in-ivanti-connect-secure
Microsoft's patch count breaks the annual record
https://cyberscoop.com/microsoft-patch-tuesday-october-2026/
Six days, three Chrome bugs, one sandbox escape
https://www.theregister.com/security/2026/10/14/security-researchers-spent-6-days-doing-their-chromework-built-1b-user-exploit/5303134
Windows gets its Always On VPN back
https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-vpn-issues-caused-by-september-windows-updates/
Get the show notes here: https://cisoseries.com/cybersecurity-news-october-15-2026/
Huge thanks to our episode sponsor, Guardsquare

AI is speeding up development, but at what cost? While ninety-six percent of teams now use AI tools, eighty-one percent report that AI-generated code has introduced new vulnerabilities into their mobile apps. In a world with automated threats, you need multi-layered, polymorphic security to stay ahead of the curve. Learn more at Guardsquare.com.

Webcams get drafted into war
https://www.wsj.com/tech/cybersecurity/video-cameras-webcams-hacked-war-b00b8a24?st=RRCsaw
Kimsuky's invitations come with malware
https://therecord.media/north-korea-hackers-russia-ukraine
Anthropic makes copycats work harder
https://www.anthropic.com/research/distillation-defenses
Adobe's patch pile hits 140
https://www.securityweek.com/adobe-patches-140-vulnerabilities-across-10-products/
Scam crackdown nets 28 arrests
https://cyberscoop.com/west-african-scammers-international-scam-crackdown-joint-disruption-week/
Fashion brands hit an IT snag
https://www.bleepingcomputer.com/news/security/tfg-london-cyberattack-disrupts-systems-at-hobbs-and-whistles-retailers/
npm closes a name-stealing loophole
https://thehackernews.com/2026/10/github-tightens-npm-publishing-after.html
Chrome bug bounties bounce back
https://www.securityweek.com/google-partially-reverses-chrome-bug-bounty-cuts/
Get the show notes here: https://cisoseries.com/cybersecurity-news-october-14-2026/
Huge thanks to our episode sponsor, Guardsquare

Is your mobile app truly protected? Relying on the OS isn't enough. A global study of thirteen-hundred security and developer leaders found that ninety-six percent of teams using layered protection reported significantly fewer security incidents. Don't wait for a breach to harden your defenses. Get the protection needed for modern secuirty risks. Learn more at Guardsquare.com.

Hackers turn up the heat on French supermarkets: https://www.infosecurity-magazine.com/news/french-supermarket-chains/
Ahold Delhaize offline after cyber attack: https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhize-takes-systems-offline-after-cyberattack/
Spy chip used in crypto wallet thefts: https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/
Russian digital services disrupted from drone strike: https://therecord.media/ukraine-strikes-third-yandex-data-center
Microsoft wants AI "emergency brakes": https://www.bbc.com/news/articles/c6rmy7zmvx3lo
UK's AI Security Institute to get early model access: https://www.reuters.com/legal/litigation/us-reverses-course-britains-testing-ai-models-telegraph-says-2026-10-11/ and https://www.telegraph.co.uk/news/2026/10/11/britain-get-first-look-ai-systems-after-white-house-u-turn/
Threat actors trying to use critical SonicWall SMA flaw: https://thehackernews.com/2026/10/critical-sonicwall-sma-1000-flaw.html
Threat actors drop the mic with karaoke hack: https://www.bleepingcomputer.com/news/security/nippon-columbia-malware-incident-exposes-86-million-karaoke-fan-records/
Get the show notes here: https://cisoseries.com/cybersecurity-news-october-13-2026/ 
Huge thanks to our episode sponsor, Guardsquare

Your backend is only as secure as your frontend. Research shows that client-side compromise is now a primary driver of API risk. With sixty-three percent of leaders detecting mobile app tampering or cloning last year, don't leave your mobile app security to chance. Get multilayered protection for your entire mobile app ecosystem from the outside in. Learn more at Guardsquare.com.

CISA's KEV catalog grows by five
https://securityaffairs.com/200734/security/u-s-cisa-adds-proftpd-onlyoffice-docs-strapi-apache-struts-and-isc-bind-flaws-to-its-known-exploited-vulnerabilities-catalog.html
Calendar phishing becomes a thing
https://www.theguardian.com/money/2026/oct/11/calendar-phishing-scam-meeting-renewal-google-microsoft-paypal
Canadian cybersecurity executive arrested in FBI hack
https://www.cnn.com/2026/10/09/politics/fbi-arrest-shinyhunters-hack
Hackers abuse Google Ads, Bing redirects to deliver Claude ClickFix attacks
https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/
Biosensor firm iRhythm announces data breach numbers
https://therecord.media/irhythm-data-breach-reports
Japan confirms arrest of Russian Qilin operative
https://therecord.media/japan-germany-ransomware-arrest
Anthropic cuts live internet access for internal AI tests after exploitative behaviors
https://thehackernews.com/2026/10/anthropic-cuts-live-internet-access-for.html
Leader of money mule operation pleads guilty
https://therecord.media/leader-of-money-mule-operation-for-cybercriminals-pleads-guilty

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-12-2026/
Huge thanks to our episode sponsor, Guardsquare

Mobile app security isn't just a tech issue; it's a revenue issue. A recent global study found that seventy-two percent of organizations experienced a mobile app security incident last year. Even worse? Sixty-five percent saw customer churn or uninstalls as a result. Protect your brand and your bottom line with layered mobile app protection. Learn more at Guardsquare.com.

Read the full stories at CISOSeries.com. 
This week's Department of Know is hosted by Rich Stroffolino, with guests Derek Fisher, Director of the Cyber Defense and Information Assurance Program, Temple University, and Chris Ray, field CTO, GigaOm.
Missed the live show? Check it out on YouTube.
The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.
Big thanks to our sponsor, Vanta! 

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.