Most teams building AI agents are pouring effort into better memory, longer context windows, conversation summaries, retrieval systems that pull up…
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
Overview On October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229 , an integer overflow in its CI/CD regular-expression…
UK Legal Aid Agency: Hackers stole records dating back to 1978
The Legal Aid Agency (LAA), an executive agency of the UK’s Ministry of Justice that manages the country’s Public Defender Service, says attackers who…
Researchers Demonstrate iOS 27.0.1 Untethered Jailbreak on iPhone 18 Pro
Security researchers from Calif (Calif.io) demonstrated a working untethered jailbreak on iOS 27.0.1 running on an iPhone 18 Pro. They showed it live at…
ICO Reprimands Met Over Third-Party Data Leak
The ICO has handed the Metropolitan Police a reprimand and enforcement notice after privacy failings linked to the Auror platform
Securing AI Agents from Discovery to Runtime: Check Point on Google Cloud’s Gemini Enterprise
AI agents are moving into production fast. They read enterprise data, call tools, and take actions across business systems. That creates a new problem: an…
Eiliko robot companion exposes private chats and can be hijacked
A researcher found serious flaws in Eiliko’s security, exposing private conversations and allowing remote changes to what the robot says.
Progress Warns of MOVEit Transfer Vulnerabilities Allowing Authentication Bypass and Privilege Escalation
Progress Software has released fixes for 12 vulnerabilities in MOVEit Transfer, its managed file transfer (MFT) platform. Several of the flaws allow…
IT Security News Hourly Summary 2026-10-16 17h : 14 posts
14 posts published in the last hour 14:32Cyber Briefing: 2026.10.16 14:32Integrated Security Operations Center (ISOC): What It Means 14:32F5 addressed critical RCE flaws in NGINX 14:31Threats Making WAVs – Incident Response to a Cryptomining Attack 14:31In Other News: ICS-Sniper Attack,…
Cyber Briefing: 2026.10.16
Cloned voices, fake recruiters and a court-system breach show how trust became this week’s biggest attack surface.
Integrated Security Operations Center (ISOC): What It Means
Learn what an Integrated Security Operations Center (ISOC) means for SOC teams, including its core capabilities, trade-offs, and role in Sekoia’s approach.
F5 addressed critical RCE flaws in NGINX
F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application…
Threats Making WAVs – Incident Response to a Cryptomining Attack
Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report…
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow…
The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced…
Forescout uncovers ROMULUS malware delivery platform behind ClickFix attacks
Forescout’s Vedere Labs has identified a previously undocumented malware delivery platform being used in ClickFix campaigns, alongside new delivery…
Metropolitan Police’s unchecked use of shoplifting platform lands force in trouble with data watchdog
Officers unlawfully uploaded 179 people’s details to Auror without required privacy checks or corporate approval
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access.…
Employees using personal ChatGPT at work? Here’s what IT admins need to do
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise…
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
FBI warns of election scams using voice cloning
The FBI has issued a public service announcement warning Americans about sophisticated fraud schemes targeting the 2026 midterm elections.
When Your Ransomware Negotiator Works for the Other Side
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
IT Security News Hourly Summary 2026-10-16 16h : 27 posts
27 posts published in the last hour 13:34KR: NHIS Employee Sold Data, Victims Uninformed for Three Months 13:34ChatGPT Chrome Extension Gets Tab Access 13:34FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack 13:33Bank of America spent millions…
KR: NHIS Employee Sold Data, Victims Uninformed for Three Months
In today’s reminder of the insider threat, Kim Ji-won reports: A National Health Insurance Service (NHIS) employee was dismissed for illegally selling…