Cybersecurity News

A list of topics we covered in the week of October 5 to October 11 of 2026

Stolen ASOS data includes shopping searches as well as personal details, so customers should watch out for convincing phishing messages.

Recorded Future's new AI Infrastructure Indicator Lists help security teams find shadow AI, enforce policy, and prevent data loss.

Pierre's debut newsletter explores the messy, real-world side of risk management and how to keep vital systems running when a perfect patch isn't an option.

Cybercriminals compromised three country-code namespaces to get certificates that could help them impersonate trusted sites.

Amazon thinks it knows your body, your family, and your life. You didn't sign up for it, and we couldn't find a way to opt-out.

Meta’s Muse AI builds personal dossiers that would make the FBI jealous. Even people who never signed up can get caught in its files.

Cisco Talos identified an APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and impersonated reputable academic and policy institutions.

“AI-analysis evasion” encapsulates the real-world techniques malware authors are developing in attempt to obstruct or defeat any layers of automated AI analysis.

ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026

Learn about Japan's Active Cyber Defense (ACD) strategy, mandatory reporting rules, and key impacts on critical infrastructure.

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft.The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy. For Snort coverage that can detect

Google has new Android updates, but many users will not be able to get patched immediately.

BlueKit puts account-hijacking tools in more criminals’ hands, making it easier to target you with convincing fake login pages and scam messages.

Google has released a new update for the Chrome browser and ChromeOS. There are a lot of security fixes in them so don't delay.

The net is tightening around the Shiny Hunters cybercrime group following the reported arrest of a second member.

The cybersecurity community has seen examples of autonomous agents, built inside AI labs, attacking public infrastructure. How you prepare for agentic threats is what makes the difference during real incidents.

A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account

ASOS customers received a push notification regarding a breach of the company. Here's what we know so far.

Facebook users are reporting receiving a message with a fake Facebook Marketplace listing that has their name as the seller.

Domino's is warning customers by email that their accounts have been compromised in a credential stuffing attack.

The cybersecurity market is often making it tougher for SMBs to keep threats at bay

Google has frozen its OSS VRP product vulnerability submissions to stop the flood of AI generated vulnerability reports.

Two sets of US lawmakers introduced bills in late September and early October to tackle the growing concerns about automated license plate readers.

A list of topics we covered in the week of September 28 to October 4 of 2026

Categories: Threat ResearchTags: advisory, vulnerability, Citrix

In this week’s edition, Amy reflects on the importance of prioritizing family and personal well-being over the pressure to remain constantly productive.

More than 70 fake crypto sites promise extra rewards for casting a vote, then prompt visitors to connect their wallets.

An AI shortcut can send confidential work data beyond your company’s control. Here’s how to get the benefits without taking unnecessary risks.

Free Mobile customers received very convincing phishing emails after major data breach.