via Microsoft Security
3 lessons from frontier AI vulnerability research
Shift 1. From frontier capability to scale Shift 2. From token consumption to reasoning economics Shift 3.
1 min Open reportThreat Intelligence
via Canadian Centre for Cyber Security
HPE security advisory (AV26-1011)
Serial number: AV26-1011 Date: October 7, 2026 As of October 6, 2026, Hewlett Packard Enterprise (HPE) is affected by…
1 min Open report
via BleepingComputer
Microsoft Outlook to block MSIX attachments starting November
Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the…
1 min Open report
via Canadian Centre for Cyber Security
[Control Systems] Johnson Controls security advisory (AV26-1010)
Serial number: AV26-1010 Date: October 7, 2026 As of October 6, 2026, Johnson Controls is affected by a vulnerability in the…
1 min Open report
via The Hacker News
PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial…
1 min Open report
via Canadian Centre for Cyber Security
Veeam security advisory (AV26-1009)
Serial number: AV26-1009 Date: October 7, 2026 As of October 7, 2026, Veeam is affected by vulnerabilities in the following…
1 min Open report
via BleepingComputer
PoeLLM malware infects exposed AI servers in cryptomining attacks
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and…
1 min Open report
via Intel 471
Agentic Hunting Needs Guardrails. Start With Your Methodology.
Is your team running each new threat report through AI to generate a hunt? The SANS 2026 Threat Hunting Survey found that usage…
1 min Open report
via CyberScoop
PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem
Malware that takes technical cues from a poem to assemble a growing botnet by targeting open-source AI services has compromised…
1 min Open report
via SANS Internet Storm Center
Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
On October 5th, Atlassian published patches for multiple products to fix an "Arbitrary File Access" vulnerability…
1 min Open report
via Canadian Centre for Cyber Security
Broadcom VMware security advisory (AV26-1008)
Serial number: AV26-1008 Date: October 7, 2026 As of October 7, 2026, VMware is affected by vulnerabilities in the following…
1 min Open report
via Canadian Centre for Cyber Security
GitHub security advisory (AV26-1007)
Serial number: AV26-1007 Date: October 7, 2026 As of October 6, 2026, GitHub is affected by vulnerabilities in the following…
1 min Open report
via Infosecurity Magazine
OT Coalition Urges CISA to Mandate Federal OT Security
OTCC urged CISA to mandate baseline security requirements for federal operational technology
1 min Open report
via The Record
Cyber experts call on CISA to create mandatory federal OT rules
The Operational Technology Cybersecurity Coalition (OTCC) released a white paper on Tuesday urging the Cybersecurity and…
1 min Open report
via Canadian Centre for Cyber Security
Google security advisory (AV26-1006)
Serial number: AV26-1006 Date: October 7, 2026 As of October 6, 2026, Google is affected by vulnerabilities in the following…
1 min Open report
via Hudson Rock
Infostealers Are Actively Hunting AI Agents and Developer Keys – Warden Infostealer
Infostealers Are Actively Hunting AI Agents and Developer Keys – Warden Infostealer Initial announcement and feature breakdown of…
1 min Open report
via Security Affairs
FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away
FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644…
1 min Open report
via Krebs on Security
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and…
1 min Open report
via Help Net Security
FortiBleed is still active, with attackers locking admins out of Fortinet firewalls
Some organizations hit by the FortiBleed campaign have been locked out of their own Fortinet firewalls, according to a joint FBI…
1 min Open report
via The Record
Russian cyberattacks against UK are 'Putin Tax' costing $3.3 billion, says lawmaker
A report by a Labour MP and an academic argues that if the British public cannot see what Russian activity costs, it cannot weigh…
1 min Open report