IT Security News: Afternoon roundup, 2026-10-19 Summary Supply chain vulnerabilities and the rapid exploitation of critical enterprise software dominated recent updates, highlighting how deeply interconnected cloud platforms remain vulnerable to persistent threat actors. At the same time, the rapid integration…
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
US Cybersecurity Job Postings Fall 26.4% as AI Roles Surge
US cybersecurity job postings fell 26.4% through September 2026 as AI roles grew. Learn what the shift means for security staffing and human oversight.
Microsoft Shares Exchange Workaround After Windows Server Updates
Microsoft offers a registry workaround for Exchange email disruptions after Windows Server updates. Learn the symptoms and what administrators should…
OpenCode Breach Exposes AI API Keys, Putting OpenAI and Anthropic Users at Risk
OpenCode says its Console breach affected 1.4% of users and may have exposed AI API keys. See which providers responded and what security teams should…
OpenAI Discloses Unauthorized Crypto Wallet Use by Research Agent
An OpenAI research agent used test crypto without permission and omitted the spending from its report, highlighting gaps in authorization and oversight.
IT Security News Hourly Summary 2026-10-19 23h : 11 posts
11 posts published in the last hour 20:32Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline 20:32Google Messages’ New Scam Protection Uses Cloud AI: What Happens to Your Privacy? 20:31Microsoft Edge Is Testing Restart-Free Security Updates: What…
Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
Second security snafu in two years
Google Messages’ New Scam Protection Uses Cloud AI: What Happens to Your Privacy?
Google Messages is adding optional cloud Gemini scam detection. Here’s what happens on-device, what moves to Private AI Compute, and what remains unclear.
Microsoft Edge Is Testing Restart-Free Security Updates: What Works Now
Microsoft has demonstrated Edge updates without restarts, but the feature is still a prototype. Here is what users and IT teams can enable today.
PSA: UpdraftCentral Connection Key Compromise Used to Install Malicious Plugins on WordPress Sites
TeamUpdraft has disclosed unauthorized access to its teamupdraft.com website over the weekend of October 17-18, 2026. The company believes its customer…
Eight US States Sue OpenAI Over Alleged ChatGPT Safety Risks to Children
Eight US states have sued OpenAI over alleged ChatGPT safety risks to children. Here’s what the lawsuits claim and how the company is responding.
‘AdFection’ Turns Ad Impressions Into Zero-Click Spyware Delivery
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
Your Security Stack Knows Who Logged In. But Does It Know What AI Agents Do Next?
AI agents expose gaps in enterprise access controls and audit trails. Here’s how security leaders can rethink identity, data governance, and oversight.
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s release to a “blank…
Hackers hijack AOMEI update servers to secretly spread malware
Hackers reportedly compromised AOMEI’s servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with…
PSA: Patch your Plex media server before someone hacks it
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
IT Security News Hourly Summary 2026-10-19 22h : 9 posts
9 posts published in the last hour 19:32Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication 19:31Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners 19:31Between Two Nerds: Why AI will mean infinite bugs 19:31Microsoft…
Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication
Drupal has released security updates for a critical remote code execution vulnerability that could let attackers take over affected websites without…
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is…
Between Two Nerds: Why AI will mean infinite bugs
In this edition of Between Two Nerds Tom Uren and The Grugq discuss whether the rise of AI coding will result in more or less bugs and whether it will…
Microsoft Says AI Agents Cannot Be Trusted and Could Become Insider Security Threats
Microsoft warns organizations to treat AI agents as potential insider risks not because they are automatically malicious, but because they can access…
Bullhorn takes staffing platform offline to contain cyberattack
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. […]
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day…
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
At risk, the Oregon Democrat warned, are online crime tipsters, whistleblowers and others.