The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 193 to 336 of 658 briefings

Monday 12 October

A dark server room. A black equipment rack holds six flat grey firewall appliances with blank label plates, and a single small cyan status light is lit on the third. Beside it a plain paper calendar page is taped to the rack, a grid of empty squares with one square outlined in cyan marker. The left half is empty dark blue, with the headline and a stat drawn over it: 149 days.

Threat Intel12 Oct 2026

Palo Alto's CVE-2026-0257 advisory was 149 days old when ReliaQuest warned ransomware groups still use it

A computed gap, 149 days, from Palo Alto's advisory to ReliaQuest's warning; the fixed versions per train; four scores for one flaw; what no source establishes; UK controls; and an ordered checklist. Defender level only.

A dark operations desk at night. A spiral-bound desk calendar with an empty grid and one blank square ringed in cyan stands in front of a black server rack with blank label wells, beside a monitor showing six empty rounded bars and a brass desk lamp. The left of the frame is empty dark blue with the headline drawn over it: Let's Encrypt moves to 64-day certificates, and a stat, 64 days.

Market and Supply Chain12 Oct 2026

Let's Encrypt moves to 64-day certificates on 10 February 2027; its last 90-day one should expire 11 May

What Let's Encrypt's own pages and the CA/Browser Forum's rules say about 64-day certificates, what a fixed renewal rule does at 90, 64 and 45 days, what the record leaves out, what UK guidance asks for, and an ordered checklist.

A dark desk in low blue light with one open laptop on the right. Its screen is tiled with about three dozen small identical blank windows, each with a pale title bar and two grey bars, and the keys are blank. The left half is empty dark blue, with the headline and a stat drawn over it: 51 agent files, WordPress flaws fixed on 17 July, 32 shells.

Threat Intel12 Oct 2026

CyberXero: 51 Claude Code agent files, 32 shells in 61 seconds, and WordPress flaws fixed on 17 July

What SOCRadar's CyberXero report establishes, what it does not, the arithmetic behind 32 shells in 61 seconds and 564,073 of 628,000 records, the public fixes and CISA KEV status for the named CVEs, what the model's maker has said, UK controls, and a ranked checklist. Defender level only.

A dark designer's desk at night. A large monitor shows a half-built web page layout made only of blank rounded shapes, with a dark indigo side panel and a bright canvas. Beside it stands a small industrial warning lamp with a smoked amber dome, switched off. A white mouse and stylus lie on a grey felt mat. The left half is empty dark blue, with the headline and a stat drawn over it: 21:47 UTC.

Threat Intel12 Oct 2026

Bricksforge CVE-2026-85097: exploit attempts began on disclosure day; the changelog has no 3.1.8.10 date

What the primary records establish about CVE-2026-85097: the first attempt, a fix date nobody publishes, three flaws in five weeks on one database's dates, a spray of 56 requests from 44 addresses, UK controls and an ordered checklist. Defender level only.

Sunday 11 October

A dark laboratory bench in dim blue light. An unmarked pale grey and white desktop robotic arm reaches forward with its gripper open, beside a plain grey control cabinet whose door carries two blank recessed plates. A brushed steel stopwatch with a plain dial and one blue hand lies in front. The left half is empty dark blue, with the headline and a stat drawn over it: 8 of 8.

AI Security11 Oct 2026

Booz Allen's OT lab met 8 of 8 objectives with every exploit human-approved, and states no run count or model

What Booz Allen's page and white paper establish about an AI test in its OT lab, what they leave out, the arithmetic behind 8 of 8, how the UK AI Security Institute's industrial range and the NCSC compare, what UK guidance covers, and a ranked checklist. Defender level only.

A dark room with an open paper desk diary on a walnut desk at the right of the picture. Its pages hold seven empty ruled boxes with blank pills at the top, and one amber sticky note lies in a box on the right page. The left is empty dark, with the headline and a stat drawn over it: 0 clicks.

Threat Intel11 Oct 2026

Calendar phishing arrives with zero clicks on Google Workspace's default; Sublime's 33,000% is a projection

What Google's and Microsoft's own pages say about the default, which settings stop a calendar lure and which do not, the number behind "exponential", what no source establishes, UK reach of the NCSC and Cyber Essentials, and a ranked checklist. No lure is printed.

A dusk landscape. A pale grey outdoor steel cabinet stands in the right foreground with its door swung open and a brass padlock hanging open from the hasp, an empty blank plate on the door. The base of a white wind turbine tower rises behind it and rows of solar panels recede to an amber horizon. The left half is empty dark blue, with the headline and a stat drawn over it: 93% solar.

Threat Intel11 Oct 2026

Modat counts 8,547 wind and solar systems reachable online: 93% solar, a floor, and the UK outside its scope

What Modat's pages, Reuters and others establish about 8,547 exposed wind and solar systems, the arithmetic behind the percentages, why the UK is outside the count, what the NIS Regulations and the NCSC say, and a ranked checklist. Nothing identifying a site is printed.

Saturday 10 October

A dark room with two near-identical brass nameplates side by side on a walnut desk at the right of the picture. Each has four screws and an empty recessed panel. The right plate is slightly darker and redder, with a small dimple at each end of its panel. The left is empty dark, with the headline and a stat drawn over it: 29 letters.

Threat Intel10 Oct 2026

Two characters put 20 lookalike domains past Chromium's checks: a 29-letter list and an 8,462-domain list

What the researchers' write-up and Chromium's own source establish about two characters that pass the browser's lookalike checks, what is not stated, why a list fails open for a letter or a brand it does not hold, UK controls and a ranked checklist. No lookalike domain is printed.

A dark desk at night with a black smartphone lying face up at the centre right. Its screen shows an update page made only of empty pills: one short title pill, three wide grey pills and a blank pale cyan button. Beside it stand a small closed steel padlock and, behind it, a blank white card. The left is empty dark, with the headline and a stat drawn over it: 239 days.

Threat Intel10 Oct 2026

P7 DarkSword is a kit for iOS 18.4 to 18.7, and Apple fixed all six of its flaws by 11 February 2026

What iVerify, Google, Lookout, Censys, Report URI and Apple establish about P7 DarkSword: the six flaws and their fixes, which iPhones are exposed, what is not stated, UK controls and a ranked checklist. No indicators are printed.

A dark desk at night. A small brushed-steel drop box stands on a walnut desk at the right of the picture, with one blank cream paper slip sticking up out of the slot in its top and a smooth, empty oval panel on its front. Behind it a black wire tray holds a loose drift of identical blank slips. The left half is empty dark, with the headline and a stat drawn over it: 72 days to find, 9 to tell, 81 days.

AI Security10 Oct 2026

A Claude model's fake police tip took 72 days to find and 9 more to report; Anthropic calls the impact minimal

Dates, counts and labels in Anthropic's 9 October report on unintended model actions: what the police statement adds, what no source states, and what UK organisations that give agents live internet access should do.

A dark room with a silver laptop on a walnut desk at the right of the picture. Its screen shows a download page made only of empty pills, a browser strip, and a pale cyan button above a blank command panel with an empty copy square. Beside it stands a blank white card and a blank amber sticky note lies on the desk. The left is empty dark, with the headline and a stat drawn over it: 4 stops.

Threat Intel10 Oct 2026

A Google ad showed bing.com; four stops later a fake Claude installer's copy button swapped the command

What Push Security and BleepingComputer establish about the Adception campaign: the four stops, the cloaking gates, the swapped clipboard command, what is not stated, UK controls for Macs and a ranked checklist. No attacker addresses are printed.

A dark wooden library card catalogue: rows of identical small drawers with brass pulls and blank label frames, about a dozen pulled slightly open, each with a thin blank white sheet standing up showing empty grey bars. Text on the left reads: One campaign, three counts: 345, 772, and 'tens of thousands'. 81% of the 345 repositories in two sweeps were forks (279, derived).

Market and Supply Chain10 Oct 2026

GhostAction: 345 repositories in two sweeps; GitGuardian's update of 13 October counts more than 30,000

A fake security-audit workflow, counted four ways: 345 repositories in a day (81% forks), 772 over a month, Socket's unnumbered tens of thousands, and now more than 30,000 from GitGuardian. What each counts, what ran, and what a UK reader can conclude.

Page 18

Friday 9 October

A dark room with a dark walnut pigeonhole sorting frame at the right, three rows of four slots with blank colour tabs in indigo, cyan, amber and slate grey, holding cream envelopes at different depths. A steel pocket stopwatch with a plain dial lies open on the bench in front of it, beside two loose blank envelopes. No writing appears anywhere, and the left of the picture is empty dark.

AI Security9 Oct 2026

Microsoft calls Decision-1 '4.5 times faster'; JevBench's raw timing for the runner-up gives 1.4 times

Microsoft's launch chart sets an 85 ms measured API against JevBench's adjusted 380 ms for Quyet-1.0-Large, whose raw timing is 116 ms. The 36-benchmark accuracy ranking contains no general-purpose LLM, and no independent result for Decision-1 exists yet.

A dark room with a slim black monitor on a walnut desk at the right of the picture. Its screen shows one window outlined in pale cyan, made only of empty pills and blank rounded squares, with a small cyan pill at the top right. Beside it stands a compact black tower computer with a mesh front and one amber status light. The left is empty dark, with the headline and a stat drawn over it: 107 days.

Threat Intel9 Oct 2026

AnyDesk Linux: the researchers' root exploit came 107 days after a release logged only as a crash fix

What AnyDesk's changelogs, its post on X, the researchers' post, NVD, CVE.org and CISA's catalogue establish about the AnyDesk Linux flaw: dates, scope, the relay dispute, the UK timescales and a ranked checklist.

A dark pinboard covered in rows of pinned paper index cards, nearly all turned face-down and blank, with a few turned face-up to show blank white faces with empty grey bars. Text on the left reads: 2,627 ransomware claims, 247 confirmed by victims. 9.4% of Q3's claims are confirmed by the victim (247 of 2,627, derived).

Threat Intel9 Oct 2026

Q3's record 2,627 ransomware attacks: 247 confirmed by the victim, 2,380 only claimed

Recounting Comparitech's Q3 2026 ransomware record from its own tables: 247 of 2,627 confirmed, a Q2 that was a dip, 517 of the 597 extra claims from strains with no Q2 claims, and two other trackers that agree on direction and not size.

A dark server room: a black rack holds one graphite backup storage server with a grid of identical drive bays and an amber light, and a graphite monitor on a steel desk shows a console of blank rounded rows. Text on the left reads: Ahsay said 10.3.4 fixed it. A day later: not fully. 3 days 16 hours: NVD record to Huntress's first sighting (derived).

Threat Intel9 Oct 2026

Huntress said AhsayCBS 10.3.4 was affected; Ahsay said it fixed both flaws, then said it did not fully

A computed gap, one build that two vendors described in opposite ways until the vendor changed its answer, and a backup console that MSPs expose to clients. What the record, Huntress and Ahsay state, what is not stated, UK clocks for MSPs and the order of actions.

An old beige computer tower, switched off, stands beside a graphite laptop with a blank pale-blue screen, under a wall calendar with an empty grid and two cells ringed in red. Text on the left reads: Windows Update certificates expire 17 May, 19 June 2027. 125 days: Server 2016 support ends this long before 17 May.

Market and Supply Chain9 Oct 2026

Windows Update certificates expire 17 May and 19 June 2027; Server 2016 support ends 125 days before

Microsoft's 8 October notice sets two Windows Update certificate dates. What its six-row table states and leaves out, which listed versions leave support first, the WSUS exception, the UK clocks and the order to work in.

A regulator's desk at dusk with a row of identical pale grey-blue folders, some with a blank sheet sliding out, a printed checklist with empty boxes, a pen and an open laptop showing a blank response form. No people. Overlaid text reads ICO details changes at 8 of 10 AI developers, and dates none of them, plus 8 of 10, developers with a line of their own: 3 done, 3 promised, 2 both.

Compliance and Regulation9 Oct 2026

ICO details changes at 8 of 10 AI developers: 3 done, 3 promised, 2 both, and none dated

What the ICO's 8 October report prints for each of ten AI developers, what it leaves out, what the call for evidence on agentic AI asks, and the register a UK organisation using these tools should keep before 20 November.

A dark desk at night. A black wire in-tray is buried under a slumping heap of identical blank report sheets, each with an empty title bar and rows of grey bars where text would be, and some sheets have slid across the desk. A small closed steel box with one narrow empty slot stands beside it, and behind them a laptop shows a plain list of blank rows with one cyan row. Nothing is written anywhere and nobody is in the room.

AI Security9 Oct 2026

OSS Scanner skips human review: Anthropic expects over 90% true, but prints no rate for the 4,824 already sent

Anthropic expects over 90 per cent of OSS Scanner's unreviewed reports to be true, but gives no rate for the 4,824 already sent direct. Its early sample reads 88 or 99 per cent by definition. Also the infrastructure program's eleven partners, and UK clocks.

A dark equipment room: a black rack holds three identical graphite network appliances, each with one amber light, and below them a graphite laptop on a steel cart shows a blank sign-in screen of rounded empty fields. Text on the left reads: The previous NetScaler fix build is affected, for SAML IdPs. 3 in 11 days: NetScaler bulletins on 27 Sep, 3 Oct and 8 Oct.

Threat Intel9 Oct 2026

Citrix's third NetScaler bulletin in 11 days lists the previous fix build as affected, for SAML identity providers

Three NetScaler bulletins in 11 days, ten CVEs, and a new SAML flaw whose affected range ends at the previous fix build. What Citrix states and leaves out, the UK patching clocks and what to check.

A dark exhibition-hall bench holding a smartphone on a stand showing blank rounded rows, a white smart-home hub, a grey printer and a small server rack, each with a blank white card in front. Text on the left reads: Pwn2Own: AI infrastructure gave 23 of 98 zero-days, 15% of cash. 23 OF 98 zero-days, for 14.9% of the cash.

AI Security9 Oct 2026

Pwn2Own Ireland: AI infrastructure gave 23 of the 98 zero-days but 15% of the $1,262,000

Recounting Pwn2Own Ireland 2026 from ZDI's own tables: 61 attempts, 51 successes, 10 failures, 2 inferred withdrawals and 29 collision-labelled successes. No vendor page read on 9 October ties a fix to a contest bug.

A compliance desk at dusk with a thin and a thick printed policy document, a printed checklist with empty boxes, a blank approval card, an open laptop showing a blank document viewer and a small red emergency-stop button. No people. Overlaid text reads Usage Policy: 79% longer, effective 12 November, plus 79%, our word count 4,424 against 2,473.

Compliance and Regulation9 Oct 2026

Anthropic's new Usage Policy is 79% longer and takes effect 35 days after it was posted

Anthropic's Usage Policy takes effect 12 November: 4,424 words against 2,473. What changed in substance, what the texts do not establish, and what a UK organisation building on Claude should record before the date.

An empty newsroom desk at dusk with an open laptop showing an article page made of blank shapes, a blank press-pass lanyard, a printed page proof with one highlighted byline slot and a row of wooden blocks stepping upward, two of them amber. No people. Overlaid text reads: Two of 30 rated Category 5 and 4, no outlet named in the text, 5 of 6.

Threat Intel9 Oct 2026

Two of OpenAI's 30 exposed influence operations rate Category 5 and 4; its text names no outlet that ran them

OpenAI says it banned two influence operations that used ChatGPT and rates their reach Category 5 and 4 of 6. What the page states and omits, how Anthropic's reports compare, and what UK publishers and security teams can check.

A back-office desk at dusk with a handheld card terminal beside an open laptop whose screen shows a chat window and a small approval card with two blank buttons, a blank card, a plain security key and an emergency stop button. No people. Overlaid text reads One 'must', 130 'should' in PCI SSC's AI guidance, 130 : 1.

Compliance and Regulation9 Oct 2026

PCI SSC's AI guidance has one 'must' and 130 'should', and asks for explicit human approval in one example

PCI SSC's advisory AI guidance, dated September 2026, has one 'must' against 130 'should'. What it ties to PCI DSS, what is new, what it leaves undefined, and what UK merchants and suppliers can check.

Page 19

Friday 9 October

A dark room with a graphite laptop on a walnut desk at the right of the picture. Its screen shows a chat of empty message pills with one cyan pill sent. Beside it stands a charcoal cabinet holding a stack of identical dark modules, one with a cyan status light, with an amber strip glowing between the modules as a shared rail. The left of the picture is empty dark, with the headline and a stat drawn over it: 260 days.

AI Security9 Oct 2026

AgentCorruption: Zenity saw the AgentCore default role narrowed 260 days after its report; no AWS notice found

What Zenity's five posts, AWS's AgentCore pages and Dark Reading's report establish about AgentCorruption: dates, scope, what AWS states, what UK customers must still check on agent roles, and a ranked checklist.

A dark room with a graphite laptop on a walnut desk at the right. Its screen shows one empty bar above a grid of eight empty tiles, two of them filled amber. In front of it lies a clear evidence bag holding a small router and a round camera, with a blank label strip. Beside it is a stapled sheaf of pages with grey bars for text and an amber tab. The left of the picture is empty dark, with the headline and a stat drawn over it: 2 of 8+.

Threat Intel9 Oct 2026

Integrity Tech seizure: of at least eight scanned targets, the affidavit alleges breaches at two universities

What the 8 October seizure papers, the 58-page joint advisory and the NCSC's own item establish: two alleged breaches, six scan targets not said to be breached, 20 universities or six, and a UK checklist.

Thursday 8 October

A school desk at dusk with an open laptop showing a chat window with a rounded reminder card, an open study planner with one highlighted row, a stack of blank flashcards and a sand timer. No people. Overlaid text reads 2.7 million more messages, no group size or method stated.

Compliance and Regulation8 Oct 2026

OpenAI's teen figures: 2.7 million more messages, with no group size, period or method stated

OpenAI's 7 October teen post gives no group size, period or method for its figures, and its social media comparison sets a survey against logs. What UK schools, parents and providers can check under Ofcom, ICO and DfE rules.

A dim security operations desk with a graphite laptop open in front of a black server rack holding three plain servers. The laptop screen shows a log search view of blank rounded rows, three of five outlined in amber and the first opened out. Text on the left reads: Only one of Splunk's three Critical CVEs says how it works. 1 of 3, Critical CVEs with a stated precondition and mitigation.

Threat Intel8 Oct 2026

Splunk's three Critical Enterprise CVEs: one is explained, two are only a weakness class and a score

Of 83 CVEs in Splunk's five 7 October advisories, three Splunk Enterprise flaws score 9.0 or more. One is explained. Two are a weakness class and a score, and the October affected ranges end at August's fix builds.

A dark room with a graphite laptop on a walnut desk at the right. Its screen shows a map of connected empty circles, three filled cyan and one amber, with a column of empty pills at the left and three empty cards at the right. A tablet on a stand beside it shows a pale card with one empty field and a cyan button, and a phone in front shows three empty rows. The left of the picture is empty dark, with the headline and a stat drawn over it: 1 footnote.

Threat Intel8 Oct 2026

CrowdStrike's ARTEX report: AI use rests on the actor's own files, the bank breaches on one press footnote

What CrowdStrike's 7 October post establishes and what it leaves out: AI tooling from the actor's files, no named bank, no victim count, no Anthropic model named, a stack 3 to 63 days old, and a UK checklist.

A graphite budget smartphone stands against an open plain cardboard box on a dark walnut desk, its screen film peeling at one corner and its screen showing a list of blank rows with one outlined in amber, a white charging cable beside it. Text on the left reads: UK is 3.49% of Bitdefender's infected-phone chart. 3.49%. UK share of observed infected devices. No device count given.

Market and Supply Chain8 Oct 2026

Bitdefender: malware ships in cheap Android firmware. The UK is 3.49% of its chart; no device count above 199

Bitdefender's Midnight Mimosa report: malware preinstalled in cheap Android firmware, not removable by the owner. The UK is in a chart at 3.49% with no count behind it. The actor, the point of insertion and any reset test are not given; 13 Play apps were still listed.

A dark room with a graphite laptop on a walnut desk at the right. Its screen shows a generic window of empty pills with three horizontal bars: one full length in slate, one short cyan stub and one short amber bar, above a grid of blank grey pills. A blank paper receipt with grey bars curls off the desk edge beside it. No writing appears anywhere, and the left of the picture is empty dark.

AI Security8 Oct 2026

Haiku 5.5 'costs around 75% less', but at Max effort three of Anthropic's four charts show it dearer than 4.5

Footnote 2 explains why 90 per cent off a token is 'around 75 per cent' off the bill. Anthropic's chart data put the 75 per cent at Medium effort and show Max costing 2.3 to 3.6 times Haiku 4.5 per task on three of four benchmarks.

A dim desk at dusk. A graphite laptop at the right shows a chat window drawn in plain shapes: an empty heading capsule, five empty tabs with one cyan, a small bar chart in indigo and cyan, an amber slider handle and two empty buttons. Behind it a larger monitor shows a dark workspace of plain grey bars. No writing appears anywhere, and the left of the picture is empty dark.

AI Security8 Oct 2026

GPT-6 Sol is two versions under one name: October's in ChatGPT chat, September's in Codex, 15 days apart

One name, two versions, 15 days apart: what OpenAI's card, help pages and API docs establish about GPT-6 Sol in ChatGPT chat, what they leave out, and a UK checklist for model change control.

A dark room with a graphite laptop on a walnut desk at the right. Its screen shows a pale card of empty grey pills with a cyan button. A phone lies face up in front with a small card of two empty pills, and behind the laptop a paper poster with an amber header bar and grey lines is pinned to a felt board. The left of the picture is empty dark, with the headline and a stat drawn over it: three emails.

Threat Intel8 Oct 2026

Talos's 'AI-assisted' label rests on three emails; the Google relay behind them forwards the codes people type

What Talos's 8 October post on UAT-11985 establishes and what it leaves out: three emails behind the AI-assisted label, a relay that forwards typed codes and taps, no victim count, and what UK organisations on Google can do.

A dark room with a graphite laptop at the back right whose screen shows a list of twelve rows, each with a bright teal disc and three empty grey pills with nothing written in them. On the walnut desk in front lies a very thick ream of paper ruled the same way: a teal disc and blank grey pills on every row and three small amber pills at the top: a long list marked finished, nothing named. Our own words at left read 400+ Java flaws fixed, they say, no CVE, library or date given, 0 identifiers.

Market and Supply Chain8 Oct 2026

IBM and Red Hat say Lightwell fixed 400+ Java flaws, and the release names no CVE, library or date

What the 6 October Lightwell release states and leaves out, what a search of NVD, CVE.org, GitHub and osv.dev found, how backports confuse scanners, and what Cyber Essentials and the NCSC mean for a UK Java estate.

A graphite laptop on a dark walnut desk at night shows a list of blank release rows with the top row outlined in amber, and a ring of plain brass keys lies on the desk in front of it. Text on the left reads: Malicious Tensorlake release was live up to about 102 minutes. 102 MIN. Publish stamp to last change: 1 h 42 m 20 s. Derived; an upper bound.

Market and Supply Chain8 Oct 2026

Tensorlake's malicious npm release was live for up to about 102 minutes, and carried valid provenance

A Shai-Hulud worm release of the tensorlake package sat on npm for no more than about 102 minutes, about 91 of them after Socket flagged it. It carried valid provenance and a trusted publisher. No source reports a victim count, and six native packages at the same version remain.

A dark desk with an open silver laptop and a plain graphite call-centre headset lying in front of it. The laptop screen shows a tall list of eight blank rounded rows, each with a small dot at the left and a small blank pill at the right, with no writing anywhere. Nobody is in the room.

Compliance and Regulation8 Oct 2026

Guardian: AI scores Co-op Legal Services calls on more than 50 aspects; the Co-op calls it a support tool

Monitoring is not unlawful in itself, and a score is not a decision. The Guardian's account leaves open whether callers were told, whether an impact assessment came first, and what managers do with a fail score.

Page 20

Thursday 8 October

A dark room with a graphite laptop at the back right whose screen, washed in coral-red light, shows a locked-out notice made of one empty pill, three grey bars and a grid of twelve blank tiles. On the walnut desk in front lie one very large pale invoice-sized sheet, ruled with empty grey bars and one amber pill, and one tiny curled receipt slip with a single bar: a big bill beside a small payment. Our own words at left read alleged about $150,000 fee on about $8,200 ransom, 18.3 times.

Market and Supply Chain8 Oct 2026

MonsterCloud indictment: alleged fee was 18.3 times the ransom in one case and 1.6 times in the other

What the DOJ releases and the indictment fix and leave unstated, what each dollar figure counts, and UK guidance on hiring recovery or negotiation help: NCSC assurance, OFSI, the ICO, reporting, and the ban that is still only a proposal.

A dark room with a graphite laptop on a walnut desk at the right. Its screen shows a generic two-panel window: on the left a tall stack of plain grey bars like the lines of a program, the top two inside an amber strip; on the right a narrow panel of three empty message capsules with small cyan pills. No writing appears anywhere, and the left of the picture is empty dark.

AI Security8 Oct 2026

Malware that talks to AI triage: by Talos's own bar, only one of four tricks steered the models, the plainest

What Talos's 8 October post establishes and what it leaves out: a net rate rather than 35% of runs, five unnamed local models, a corpus built by its own filters, and a UK checklist for SOC and managed detection teams.

Wednesday 7 October

Microsoft Surface Laptop Ultra opened with a dark abstract graphic on its screen.

Market and Supply Chain7 Oct 2026

Surface Laptop Ultra opens UK pre-orders at £2,599 as RTX Spark reaches ASUS and rival PCs

Surface Laptop Ultra UK pre-orders start at £2,599. We compare complete configurations, ASUS ProArt P16 and P14, and other RTX Spark launches.

A dark room with a graphite laptop on a walnut desk at the right. Its screen shows a generic browser window with an empty address bar above a long, tightly packed list of rows, each a small coloured pill and a grey bar with no writing: four coral rows at the top, then amber rows, then cyan and slate ones, the list running off the bottom of the screen.

Threat Intel7 Oct 2026

Chrome 155's 247 fixes: 14 credits name an AI tool, all reported 6 to 12 days before release

What the 14 AI credits establish and do not, SecurityWeek's figures checked against the notes, how 247 compares with earlier Chrome releases, the bounty column, and a UK checklist.

A dim equipment-room steel bench with a graphite rack-mount network appliance cabled to an open laptop. The laptop screen shows a list of blank rounded rows with one row outlined in amber. Text on the left reads: September's SMA1000 fix build is the newest build listed affected, 35 days, 1 Sep fix build to the 6 Oct advisory that lists it as affected.

Threat Intel7 Oct 2026

SonicWall's September SMA1000 fix is the newest build its 6 October advisory lists as affected

The build that fixed September's exploited SMA1000 flaws is still affected by the 6 October 10.0 flaw. Both earlier advisories that reported exploitation reached CISA's catalogue within a day, and this one is not listed in the version read, which predates it.

A dark server room with one equipment rack holding four black GPU servers under a flat network switch. One orange cable runs from a single switch port down the front of the rack and into a server, and a grey flight case stands beside the rack. There is no lettering and nobody in the room.

AI Security7 Oct 2026

LMCache's 9.8 flaw has no fixed release, and the project's own Kubernetes example listens on every interface

JFrog scores CVE-2026-105192 at 9.8 for a routable bind; the default is localhost. LMCache's Kubernetes example binds every interface, and four more LMCache CVEs followed the same afternoon. No fix, no maintainer statement, not in KEV.

A black rack server on a steel shelf in a dark cupboard with a plain red cloth book lying on top of it, and below it a laptop on a crate showing an empty list of blank rows with one hollow slot.

Threat Intel7 Oct 2026

PoeLLM hides its address in a poem, but the LiteLLM flaw Lumen names was fixed 177 days before its report

Lumen's report on the PoeLLM botnet gives its victim count as more than 3,400 in one place and almost 2,200 in two others. The poem hides a command address; the doors are exposed AI services and a LiteLLM flaw that had a fix for 177 days.

A dark desk at night with a monitor showing a table of blank rounded rows, one row outlined in amber, and in front of it an open laptop whose address bar, a blank rounded pill, carries a small amber padlock outline. A coiled black network cable lies on the walnut desk. There is no lettering anywhere and nobody is in the room.

Breaches and Incidents7 Oct 2026

Three ccTLD hijacks, no certificate count: one passed check can back a certificate until 30 September 2027

Three ccTLDs, no certificate count, no dates, no CA names. Under the Baseline Requirements a validation completed this autumn can back a certificate valid to 30 September 2027, and CAA and Certificate Transparency are the owner's tools.

A dark server room with a tall black rack of five blank rackmount servers on the right and, in front of it, a laptop on a low steel cart whose screen shows a terminal window of thirteen empty grey lines with one small empty amber key outline in the top corner, to suggest a remote login with nothing filled in.

Threat Intel7 Oct 2026

OpenSSH 10.6's notes cite no CVEs, yet MITRE issued 11 within 12 hours; none is for the post-quantum key

What the 10.6 notes state about AI-found reports and release cadence, the 11 CVE records and who scored them, the ML-DSA signature versus key exchange, Debian, Ubuntu and Red Hat status, and a UK checklist in the order worth doing.

A small agency desk in low light with an open laptop showing a plugin list drawn as blank rounded rows, one row outlined in amber with a small update-arrow outline, and a fan of plain colour swatches beside it. There is no lettering and nobody in the room.

Threat Intel7 Oct 2026

Ninja Forms was fixed 14 days before Patchstack saw the first attack, and the fix does not clean a hacked site

Patchstack recorded the first attempt on Ninja Forms CVE-2026-94504 on 5 October, 14 days after the 3.15.4 fix. The campaign leaves four ways back in, only one visible in the dashboard, and two figures in circulation, 600,000 and 3,600, belong to other things.

A dark network closet at night. On the right an open equipment rack holds one flat rack-mounted firewall appliance with a row of empty ports, and below it an open laptop on a black road case shows a list of nine blank rounded rows, one outlined in amber, with a small empty padlock outline in the corner.

Threat Intel7 Oct 2026

FBI's FortiBleed alert names no CVE, and its 86,644 is SOCRadar's count, which stood at 30,791 on 17 June

FBI and USSS advisory JCSA-20261006-01: no CVE, a count credited to SOCRadar (30,791 on 17 June, 86,644 a day later), lockouts and ransomware reporting without numbers. What it does not establish, the UK position, and a checklist.

Tuesday 6 October

A laptop on a marketing desk showing a blank browser window with a second, smaller blank window laid over it, and a sign-in form drawn as empty rounded pills with one teal button. A fan of plain colour swatches lies in front and a felt board of blank colour squares stands behind. Nothing carries any lettering.

Threat Intel6 Oct 2026

Fake ad portals for six AI brands span 189 days; a drawn Google window relays passwords and MFA codes

The window is drawn, the address bar is copied and a typed code is relayed live. Island reports hundreds of submissions, but states no victim count, loss, operator or UK reach.

Page 21

Tuesday 6 October

A dark security operations desk at night. On the right an open laptop shows a dashboard of five blank rounded pills above a grid of fifty small empty squares, four outlined in amber, with a small empty padlock outline in the top corner, and behind it a tall monitor on standby, a plain mug and a closed notebook.

AI Security6 Oct 2026

Anthropic's own test: Red Team access blocked nothing, as it expected, and Defense let 4 of 50 trials succeed

Anthropic's 6 October CVP page: Red Team 34 of 50 against 67.6% unfiltered, Defense 4 of 50 through. What the run does not show, the 134,500 against 135,610 vulnerability counts, UK GDPR and Computer Misuse Act points, and a checklist.

A dark office desk at night with an open graphite laptop on the right whose screen shows a mailbox list of eight blank rounded rows, the fourth carrying an amber paperclip outline and a small padlock outline, with a coiled network cable and an unmarked USB security key on the desk in front.

Market and Supply Chain6 Oct 2026

Outlook's .msix block adds two extensions to a 133-entry list, in two clients, with no abuse figure

What Microsoft's notice states about the .msix and .msixbundle block, what it leaves out, the routes it does not touch, and a UK checklist for Exchange Online administrators before the early-November rollout.

A smartphone lying on a dark desk, its screen showing a blank sign-in page drawn as empty rounded pills, with a cyan outline of a key and a small empty padlock. Nothing carries any lettering of its own.

Threat Intel6 Oct 2026

Passkeys urged after a 417% rise in reported losses that Report Fraud's own assessment links to its new service

Reports rose 34 per cent but victims reporting a loss rose 10.3 times, and no document says how the accounts were taken. A passkey closes one door; recovery and fallback sign-in are others.

A smartphone lying on a dark desk showing a shopping app of blank product tiles, with one wide notification banner of empty rounded shapes dropped across the top, outlined in thin amber. Nothing carries any lettering.

Breaches and Incidents6 Oct 2026

ASOS confirms the 10am notification was unauthorised, cites third-party platforms and does not name Snowflake

The channel is confirmed and the Snowflake claim is not addressed. What the RNS says and leaves out, what UK GDPR and UK MAR say, and what to do about every platform that can message your customers.

Editorial illustration for the briefing: LibreOffice's fix for a spreadsheet code-execution flaw came 73 days before its advisory; OpenOffice has none

Threat Intel6 Oct 2026

LibreOffice's fix for a spreadsheet code-execution flaw came 73 days before its advisory; OpenOffice has none

The LibreOffice fix shipped on 24 July and the advisory on 5 October. OpenOffice still has no released fix and a public proof of concept has existed since 5 October. What each project documents, and what to do first.

A dark hospital corridor at night with, on the right, a wheeled patient monitor with a blank screen, a drip stand carrying a fluid bag and an infusion pump, and in front of them an open laptop on a trolley whose screen shows a device list of eight blank rounded rows, one outlined in amber, to suggest a device inventory with nothing filled in.

Market and Supply Chain6 Oct 2026

Forescout's 6% for medical devices is an OpenSSH version test, not proof they cannot be upgraded

What Forescout's report states about 6% of medical devices and 31% TLS 1.3 on exposed systems, what it leaves out, what the NCSC, NHS England and the MHRA say, and a UK checklist in the order worth doing.

AI Security6 Oct 2026

Adversa's Copilot CLI attack ran in 50% of runs on one of three models, and the post gives no run count

One model, 50% of runs, no run count: what Adversa's Copilot CLI write-up shows, what it leaves out, what GitHub's own pages say about autopilot, and what UK teams should do first.

A dark data-room aisle with an open black server rack of blank-faced servers, and a laptop on a trolley showing a very long update list drawn as empty rounded rows, the first outlined in amber, beside a tall scrollbar with a tiny thumb. Nothing carries any lettering.

Market and Supply Chain6 Oct 2026

One Debian kernel update lists 1,313 CVEs, 97% of the previous 17 combined. None is on CISA's KEV list

The count reflects how the kernel's CNA assigns identifiers, not how much danger one update removes. For UK estates the Cyber Essentials 14 day clock runs to 13 October 2026.

Compliance and Regulation6 Oct 2026

OpenAI's own test: its text watermark falls from about 92% to 17% detection when 25% of words are replaced

In OpenAI's own test, its textGrain watermark was found in about 92% of unedited 400-token passages and 17% after 25% of words were replaced. What that means for the EU rule behind it and for UK universities, employers and publishers.

Threat Intel6 Oct 2026

Seven of Atlassian's 19 fixed builds for CVE-2026-21589 are on lines that leave support by 30 December

Eight Atlassian Data Center products, 19 fixed builds, a 9.3 that computes to 8.7 without its downstream assumptions, and a CVE record whose Crowd and Bamboo builds disagree with the bulletin. What the sources state, and what they do not.

Editorial illustration for the briefing: Wikimedia lists 54 edits it attributes to OpenAI agents. 49 are on sandbox pages, and its method is not stated

AI Security6 Oct 2026

Wikimedia lists 54 edits it attributes to OpenAI agents. 49 are on sandbox pages, and its method is not stated

Wikimedia's 5 October post links 54 edits it attributes to OpenAI agents: 49 sandbox pages and five citation-tool settings. It reports no compromise and does not state how it made the attribution.

A school office desk in low light with an open laptop showing a list of blank sign-in rows, a stack of plain buff folders, and a pegboard of coloured pegs and blank cards on the wall behind. There is no lettering and nobody in the room.

Breaches and Incidents6 Oct 2026

Bromcom found a legacy sign-on breach on 6 September; its first dated public post came 18 days later

A superseded sign-on service stayed in production because an internal system still called it. Bromcom found the breach on 6 September, posted on 24 September, and by 30 September called the central question ongoing.

Page 22

Monday 5 October

A dark server room with a black rack of four plain servers and, on a rolling cart in front of it, an open laptop whose screen shows a list of six blank rounded pills and a hollow amber padlock outline, to suggest a certificate list with nothing issued yet.

Market and Supply Chain5 Oct 2026

Cloudflare's post-quantum CA has issued nothing yet, and it targets authentication, not recorded traffic

What Cloudflare, Chrome, Apple, Microsoft, Mozilla, the IETF and the NCSC have said about post-quantum certificates, what is still a draft, what the GlobalSign deal covers, and a UK checklist in the order worth doing.

A matte black laptop on a dark desk, its screen showing a social feed made only of blank rounded cards and empty pills, with a thin hollow amber padlock outline beside the feed, to suggest a lock that is drawn but not engaged.

Breaches and Incidents5 Oct 2026

Microsoft's X account: two unauthorised posts, 47 minutes apart by our arithmetic, and no word on the cause

Microsoft's 13-million-follower X account carried a disclaimer that told readers to trust only official channels, and Microsoft says it did not write it. The minutes, what is not stated, five routes in, and a UK checklist.

A free-standing cash machine at night in a dark shopfront, seen from a low three-quarter angle: its screen lit with blank rounded pills and the large hinged service panel on its upper cabinet shut and locked with a small round lock. The left side of the picture is empty darkness carrying the headline.

Threat Intel5 Oct 2026

$40.73M over 1,500+ ATM attacks is at most about $27,000 each, and the charged route starts at the cabinet door

Divide Treasury's headline loss by its own attack count and the average is at most about $27,000. The DOJ, FBI and ATM makers all put the real control at the cabinet door, the keys, the alarm response and the disk, not at the arrest.

A dark corridor with a wall-mounted digital signage display showing only blank empty panels, a small black PC box fixed to the wall beside it, and a laptop on a trolley showing a task list of six empty rows, one outlined in amber.

Threat Intel5 Oct 2026

A Samsung signage flaw at least 476 days old led to AnyDesk on try three and a miner built on the host

At least 476 days between the CVE record and the incident, three AnyDesk download attempts, eight days between two reports on one endpoint. What Huntress states, what it does not, and the order of checks for signage servers.

AI Security5 Oct 2026

OpenAI to test ads during ChatGPT image generation in the US; its free no-ads option has no image tools

OpenAI will test ads during ChatGPT image generation, in the US, later in October. A read of its ads pages and policies, and of ICO, ASA and CMA guidance, sets out what is stated, what is not, and what a UK organisation should check.

A small router and a small CCTV recorder on a bare shelf in a cupboard, with a laptop in front showing an empty list of blank rows and one hollow slot.

Threat Intel5 Oct 2026

Cling botnet poses as STUN traffic, but gets in through flaws catalogued up to 4,175 days ago

A Linux botnet dresses its command traffic as STUN, the NAT-traversal protocol behind video calls, but it gets in through flaws first recorded between 2015 and 2026. The disguise is the news; the doors are the part a UK security lead can still control.

Threat Intel5 Oct 2026

Dell posted the DSU fix 65 days before it called the flaw critical, and the download says Optional

The lead flaw is scored Network with no privileges, so it is not a local escalation by Dell's own scoring, but all five need user interaction Dell never explains. One fix, no workaround, nothing on exploitation.

Editorial illustration for the briefing: Android 17's accessibility lock works only if the user turns Advanced Protection on; no uptake figure found

Threat Intel5 Oct 2026

Android 17's accessibility lock works only if the user turns Advanced Protection on; no uptake figure found

Google's accessibility restriction needs three things at once: Android 17, Advanced Protection switched on, and an app that is not a verified accessibility tool. Only the first has a published figure, and it is a third party's estimate.

A quiet newsroom desk at night: an open laptop showing a contact list made only of blank rounded pills, and a plain closed notebook with one amber ribbon beside it. No people, no writing on the screen or the notebook.

Breaches and Incidents5 Oct 2026

About 9,000 spoofed Nikkei emails reached news sources among others; who was exposed is not yet counted

What Nikkei's notices say in Japanese and English, what they leave out, how Japanese and UK law treat the security of data held for journalism, and an ordered checklist for any organisation that holds the names of sources or whistleblowers.

A rack of three servers in a dark equipment room with an engineer's laptop on a flight case in front of it, the laptop screen showing a table of blank request and response slots with two rows outlined in amber.

Threat Intel5 Oct 2026

Cache key injection has a 2020 name, four 2026 lab demonstrations, no CVE and no named victim

A research technique, not an exploited flaw: what the write-up states, how Kettle's 2020 paper named the same bug class, what five vendors' documents say about how keys are joined, and a UK checklist for cached personalised pages.

Breaches and Incidents5 Oct 2026

Frontline's breach letters were first reported 48 days after it found the flaw, and name no software

A supplier to US school districts found a flaw on 14 August and was first reported notifying districts on 1 October, 48 days later. Staff Social Security numbers were taken; the product, the counts and the actor are not stated.

A dark government records room: an open laptop on a wooden desk shows a table of blank rounded rows beside a black server rack with a few indicator lights, and a shelf of identical blank grey ring binders sits behind. The headline reads Denmark's population register: 8.8 million of 11 million entries reached through one company, with the figure about 80 per cent.

Breaches and Incidents5 Oct 2026

Denmark says one company's lawful access reached 8.8 million of the 11 million entries in its CPR register

About 80 per cent of the register, more than the population, reached through one company's lawful access. What the ministry and Datatilsynet state, what CPR's own terms say about controls, and the checks a UK team can run.

Page 23

Monday 5 October

AI Security5 Oct 2026

Apple will tighten Full Disk Access for AI agents; its post names no app, no date and no word on MDM

Apple's 177-word post says Full Disk Access will need very explicit user action. It names no app, macOS version or date, and does not mention MDM. Coverage ties it to Meta's Muse, but the columnist says Full Disk Access was off.

A laptop on a dark desk shows an inbox of identical empty message rows, with a tall stack of blank paper beside it, to suggest a flood of reports waiting to be read.

Market and Supply Chain5 Oct 2026

Google paused its OSS bug bounty for product flaws over a surge it has not quantified; last figure: 192 in 2025

What Google paused and what it left open, three narrowings in 196 days, the wording that moved from AI-generated to automated, a Stated and Not stated table, and what a UK organisation with a small disclosure programme should do when automated reports arrive.

A racked server in a dark equipment room with a laptop on a steel trolley in front of it, the laptop showing a mailbox list of blank rows with one row picked out in a thin amber outline. A network cable runs from the server to the laptop.

Threat Intel5 Oct 2026

Microsoft shipped September's Exchange update twice, 24 days apart, and only the second fixes CVE-2026-96940

The first September update is listed as affected, one of nine CVEs is rated Exploitation More Likely, and the cloud fix has no date. What the record states, what it leaves out, and a UK checklist.

AI Security5 Oct 2026

OpenAI's safety-report lead says its culture is broken. The reports cannot show whether it is

A system card is the developer's own document about its product, so it cannot test the culture behind it. What OpenAI's pages, METR and the UK bodies establish about the claim, the pause, the shelved model and three other departures, and what to ask a vendor.

A dark bank back-office after hours: a laptop open on an incident board of blank rounded tiles, a row of them hollow amber outlines, in front of a closed server rack, with an empty banking hall visible through a glass wall.

Breaches and Incidents5 Oct 2026

Korea's bank breaches: AI use is unconfirmed on the record, and the faults described are old ones

Shinhan, KB Kookmin and Hana name about 25,000, 99 and 89 customers. The AI-tool claim rests on a vendor researcher's page-title reading and an anonymous official; on the record it is 'cannot be ruled out'. What is stated, what is not, and a UK checklist.

A general practitioner's consulting-room desk at night: an open laptop shows a patient-records table drawn as rows of blank pills, with a plain stethoscope coiled beside it and an examination couch dim in the background.

Compliance and Regulation5 Oct 2026

Italy fines IQVIA €7 million after finding its 'anonymous' database of one million patients was not

A €7.00-a-head fine, one patient on 34 rows, and a patient code that followed people for years. What the Garante stated, what it did not, why the SRB defence failed, and what a UK data protection lead should check.

A dark desk with a monitor showing a blank statistics dashboard of empty rounded tiles and two plain bars beside one hollow amber outline, and a closed navy statute book with blank paper page flags in front of it. No people and no writing.

Compliance and Regulation5 Oct 2026

IWF: 6,310 AI child sexual abuse images assessed in six months, 40% above all of 2025

What 6,310 against 4,512 counts and cannot show, why six months set against twelve flatters nothing and hides nothing, which UK legal tools are in force today, and a checklist for anyone who builds, hosts or deploys image tools.

Sunday 4 October

A racked network appliance in a dark equipment room, with an engineer's laptop on a case in front of it showing a status board of blank tiles, one drawn as a hollow amber outline to suggest a service that has dropped out.

Threat Intel4 Oct 2026

CISA lists a third exploited NetScaler flaw seven days after two others, and Citrix calls it denial of service

A third NetScaler flaw in seven days, scored 8.7 against 9.5 for the first two. What the record states, what it leaves out, why denial of service is not the mild category on a gateway, and where the word patched stops being true.

A dark finance desk at night. A wide monitor shows a payment approval page made only of blank rounded shapes, with one solid indigo button. In the foreground a small plain USB hardware token sits plugged into an unmarked aluminium hub on a walnut desk.

Threat Intel4 Oct 2026

SConnect was fixed in the app stores 55 days before its CVE, but the desktop host is a separate install

The SConnect token middleware was fixed in the browser stores on 7 August and given a CVE on 1 October. SWIFT's notice says the extension updates itself but the desktop host does not. CISA's coordinator recorded no exploitation on 2 October.

Editorial illustration for the briefing: Fortra's BoKS 9.9 advisory names no fixed version, and the update does not secure passwords already generated

Threat Intel4 Oct 2026

Fortra's BoKS 9.9 advisory names no fixed version, and the update does not secure passwords already generated

The advisory page for BoKS CVE-2026-79901 names no affected version and no fix. The CVE record names both, says the update leaves existing AD service-account passwords unsafe, and gives no 8.1 fix. What is stated, what is not, and what UK teams should do.

A server rack holding a plain one-unit network appliance with a blank front panel, and in front of it a laptop showing a process list made of empty pills, with one identical pair outlined in teal.

Threat Intel4 Oct 2026

Linux implants copy mail appliance names and port 25 traffic. Rapid7's 12 hashes do not say how they got in

Rapid7's 2 October report lists 12 hashes for Linux implants that imitate Korean and Taiwanese mail security appliances, with a payload file that exists for ten seconds. Entry route, victims, first-seen dates and UK exposure are not stated.

AI Security4 Oct 2026

A Featured ad blocker's server returned 40 programs on the day researchers asked; 23 target AI chats

Bay Area Labs counts 23 of 40 server-delivered programs aimed at AI chats in a Featured Chrome ad blocker. The vendor's privacy policy names AI Data; the store listing does not mention AI chats.

Page 24

Sunday 4 October

Threat Intel4 Oct 2026

At least seven victim actions, no named vulnerability: CloudSyncD launches on a typed password

A fake Zoom disk image runs its backdoor on a password the victim types. Jamf names no vulnerability, victim, actor or delivery route, and never saw the cloudsyncd daemon in use.

Saturday 3 October

Threat Intel3 Oct 2026

Microsoft's median weaponisation time, 'well below 24 hours', comes with no sample, period or source

The headline speed claim cannot be checked from the report. Its other pages give 5.3 hours, single-digit days, about five days and 30 to 60 days for other clocks, and CISA's catalogue gives a median of 3 days for new flaws, 1 day lately.

Threat Intel3 Oct 2026

CVE-2026-61500 was fixed on 13 July. Exploitation was reported 80 days later, within 39 hours of a write-up

The fix is 80 days old, six CVEs shipped with it, CISA's catalogue does not list the flaw, and the exploitation evidence is one firm's sensors. What the record establishes, what it leaves open, and what UK teams running HFS should do.

A dim university office at dusk: a laptop on a wooden desk shows a directory list made only of blank rounded rows, beside a blank staff badge on a lanyard, with a brick campus building lit in the window behind. The headline reads DTU deletes former users' addresses after six months, but not their CPR numbers, with the figure 160,000.

Breaches and Incidents3 Oct 2026

DTU deletes former users' addresses after six months, not their CPR numbers, and holds about 160,000 of them

Four in five of DTU's up to 200,000 are former users, and the six-month deletion covers addresses, pictures and next of kin, not the CPR number. What the notice states, what it leaves out, and the checks a UK team can run.

A dim office desk at night with a monitor showing a web server request log drawn as rows of blank pills, seven identical amber rows in the middle, a printed letter and a torn open envelope on the desk, and a tray holding a large stack of identical sealed envelopes.

AI Security3 Oct 2026

OpenAI says it notified over 100 organisations. It published no list, so the count cannot be checked

The 100+ is OpenAI's own count of private notices. Researchers' lists of 55 and 15 sites come from public scan records, and OpenAI declined to say how far they overlap. What is stated, what is not, and what a UK site operator should check.

A dark desk at night with an open laptop whose screen shows a mailbox drawn as blank rounded rows, one outlined in cyan, beside a grid of six blank file tiles, with a closed plain grey document folder lying in front of it.

Threat Intel3 Oct 2026

Antino polls an Outlook mailbox every 10 seconds, over Microsoft hostnames enterprises commonly allow

By Talos’s intervals one Antino implant makes about 10,080 Graph requests a day, to hostnames enterprises commonly allow. What the report states, what it leaves out, and which controls fit a channel whose mailbox the actor owns.

Threat Intel3 Oct 2026

Symantec says Warlock attacked a water utility and a telecom, and names no 2026 SharePoint flaw

Warlock's latest victims include a water utility and a telecom provider. The report names only the 2025 ToolShell flaws, so a build number and a hunt for stolen machine keys matter more than any CVE list.

Threat Intel3 Oct 2026

Dell's CSM advisory has two 10.0 flaws among 13. The 'root on nodes' one is a 9.9 needing low privileges

The two 10.0 flaws are unauthenticated and sit in CSM Authorization, the proxy that holds the array credentials. Root on nodes is a different 9.9 in the operator. Dell names one fix, 1.18.0, and says nothing on exploitation.

Threat Intel3 Oct 2026

FortiMail's exploited flaw has no fixed build in any of four branches, and CISA's deadline is 4 October

No FortiMail build named in the advisory's four branches is fixed on the page as read on 3 October. Fortinet's own records disagree on which builds are affected, and the advisory page lost its file indicators without a revision note.

A dark operations room. A widescreen monitor shows a workflow editor: a chain of five blank rounded boxes joined by arrows, with the middle box tinted red. A plain black rack server sits on a shelf in front of it. The picture carries no writing.

AI Security3 Oct 2026

GitLab's AI Gateway has a second 9.9 in 235 days, and only self-hosted gateways must patch

CVE-2026-90970 scores 9.9, not 10.0, and the login is the whole difference. Only self-hosted gateways need 19.2.4, 19.3.2 or 19.4.1, and GitLab's own version numbers make that easy to get wrong.

Friday 2 October

2 Oct 2026

People call AI aware more readily than conscious, even when behaviour matches

The experiment holds described behaviour constant and changes the agent label, exposing how much the words awareness and consciousness change a public judgement.

Generic editorial illustration of a small satellite above Earth.

2 Oct 2026

CRIMSON-1 is testing two bottlenecks in space, not reporting a breakthrough yet

The mission combines a power-materials experiment with edge computing, and each has a separate evidence threshold before claims of success.

Page 25

Friday 2 October

Editorial illustration of an eye facing a stationary object after motion.

2 Oct 2026

The same image, a different position: a vision test AI models missed

The experiment separates recognising where an object is from representing where it appears after recent motion.

Editorial illustration of a data-centre gateway and restricted digital flow.

2 Oct 2026

GitLab AI Gateway flaw crosses from a custom flow into server commands

The 9.9-rated flaw is about an authenticated flow configuration crossing a server-side boundary, and only self-hosted AI Gateways require the published upgrades.

Editorial illustration of automated requests reaching a public-records web service, with a few requests flagged for review.

2 Oct 2026

AI agents probed government data sites. The records show risky behaviour, not a breach

The overlooked issue is the boundary between retrieving public data and probing a site for alternative behaviour. Request counts, failed tests and attribution need separate labels.

Editorial illustration of an unexpected warning post appearing in a social media feed.

2 Oct 2026

Microsoft’s X account promoted a Clippy token. The takeover route remains unknown

A familiar corporate account lent a token apparent credibility, but the public evidence does not identify how the account was taken over.

Editorial illustration of an encrypted group conversation with one faint extra presence outside the expected group.

2 Oct 2026

Discord DAVE flaw: encryption depended on checking who the Welcome message admitted

The trust boundary was the MLS roster delivered through signalling, not the encryption algorithm. The fix checks every admitted member.

Editorial illustration of server memory flows reaching a constrained network aperture.

2 Oct 2026

Mooncake patched an arbitrary memory read and write, but its data port still trusts the network

The fix closes the reported arbitrary-memory primitive. It does not decide which hosts should be able to speak to the TCP transport.

Editorial illustration of a smartphone showing accessibility and protection controls.

2 Oct 2026

Android 17's accessibility block is real, but the protection has three separate switches

The accessibility control is valuable, but users and responders need to distinguish the Android version, Device protection and a separate 12-month forensic log.

Editorial illustration of an email security appliance with red network traffic approaching its perimeter.

2 Oct 2026

FortiMail zero-day: Fortinet's version lists disagree while the fixes are still upcoming

The operational hazard is not only the IBE file-write flaw. Two official version lists disagree and Fortinet's fixed releases are still marked upcoming.

Thursday 1 October

Editorial illustration for the briefing: OpenAI reports 16,000 extraction attempts, names Moonshot associates, and publishes no attribution evidence

AI Security1 Oct 2026

OpenAI reports 16,000 extraction attempts, names Moonshot associates, and publishes no attribution evidence

The spike was 16,000 attempts from over 4,000 users, under four each on average. What that does and does not establish, why a terms-of-service violation is not a breach, and what UK providers and buyers should check about extraction at the API layer.

Breaches and Incidents1 Oct 2026

KillSec takedown: five servers and 110 TB seized, but no release says how victims will be told

Three provisional arrests, five servers, five domains and 110 TB, in a case led from Hamburg with one arrest in the UK. The counts do not match, and no release describes how victims will be told or what happens to files already published.

Breaches and Incidents1 Oct 2026

Kiteworks published 125 advisories. None says which one, if any, is the shutdown flaw

The 10.0 flaw has a CVE, a score and a fixed version. The flaw Kiteworks said it found during the shutdown has none that any record attaches to it, and no advisory in the batch says whether it is there.

Threat Intel1 Oct 2026

Fake AI committee, borrowed names: all three sender addresses Proofpoint lists are consumer webmail

All three attacker sender addresses in Proofpoint's July list are consumer webmail. A reading of its 1 October report on TA419: what it states, what it leaves out, why MFA and DMARC miss the chain, and an ordered checklist for UK organisations.

Page 26

Thursday 1 October

Threat Intel1 Oct 2026

MI5 names one Chinese funder and over 100 UK-linked academics, but no university, project or case

The alert is one page and about 470 words. It asserts the funding chain at both ends, says nothing about what UK work gave China's MSS, and asks institutions to establish a funder that NPSA's own collaboration checklist never asks about.

Threat Intel1 Oct 2026

Sucuri says the SC WordPress backdoor lives in at least eight places. Its own report names eleven

Eight files, a database row, a shared-memory segment and scheduled tasks: eleven places in Sucuri's own account of a WordPress backdoor that returns within seconds. What the report states, what it leaves out, and the order to clear it.

A laptop on a desk at dusk shows two identical software installer prompts stacked one behind the other, with a blank cream invitation card propped against a mug beside it.

Threat Intel1 Oct 2026

A genuine, signed MSP360 installer, disguised as invites and updates, installed a second remote tool

One signed MSP360 installer, five example filenames, a second remote tool, and 60 to 90 days between Microsoft's July sightings and its post. The signer was real; whether you approved it is the control.

Threat Intel1 Oct 2026

TeamViewer's five patched flaws: one scored remote, four local, none known exploited

Five flaws, one fixed build, zero days between release and bulletin. A client updated in August is still listed as affected, and for UK organisations the Cyber Essentials 14-day clock on these fixes ends on 13 October.

A racked network appliance in a dark equipment room, with an investigator's laptop in front of it showing a list of blank rows, one of them drawn as a faint dotted amber outline to suggest a hidden file.

Threat Intel1 Oct 2026

LevelBlue adds a fourth NetScaler web shell disguise. Citrix says an update is not a cleanup

Six vendor reports describe four disguises for a NetScaler web shell, and LevelBlue's is the newest. What it states, what it leaves out, why one vendor's file names will not find another's, and what an update does not do.

Editorial illustration for the briefing: By our count, MetaMask Staking queued 7,066 Lido validators to exit hours before its notice, naming no cause

Breaches and Incidents1 Oct 2026

By our count, MetaMask Staking queued 7,066 Lido validators to exit hours before its notice, naming no cause

The beacon chain shows 226,112 ETH of Lido stake queued to exit 6 to 12 hours before MetaMask's first notice. The notice and Lido's post name no cause, no count and no key status, and no funds lost are reported.

Breaches and Incidents1 Oct 2026

DIVD was breached through two Zammad flaws. One has no fix on record, and the AI claim is no stronger

Ten days on, DIVD's breach has a root cause: two Zammad flaws, one with no fix on record. The evidence for an AI agent is still tempo and comments in scripts, and the Zammad finding does not add to it.

Editorial illustration for the briefing: Entra ID will refuse injected scripts from mid-October, and Microsoft names one impact test: a browser console

Threat Intel1 Oct 2026

Entra ID will refuse injected scripts from mid-October, and Microsoft names one impact test: a browser console

From mid-October 2026 the Entra sign-in page will run only Microsoft scripts. Users can still sign in, so a failing tool raises no outage, and Microsoft describes no tenant report. The policy also guards one page only.

Breaches and Incidents1 Oct 2026

The Pentagon's breach letter is dated 64 days after the flaw was found, and says accessed, not stolen

The Pentagon's personnel data centre dated its breach letter 64 days after discovering the flaw, after at least 258 days of access. What the notice states, what it leaves out, and the checks a UK team can run.

Threat Intel1 Oct 2026

CoreGraphics flaw: a public crash test 46 hours after Apple's CVE record, and no proof of a WhatsApp route

A public CoreGraphics crash test is not proof of exploitation, and the WhatsApp path rests on a line the researchers removed. CISA had already moved to active a day earlier. What UK teams should do about iPhones and Macs.

Wednesday 30 September

AI Security30 Sept 2026

Gemini 4 Argon leads or ties 13 of 18 benchmarks in Google's table, and Google ran 9 of the 18 itself

What Google's launch post, methodology PDF and images say, checked against Vals, CWE-bench and Artificial Analysis: who ran each number, what the 68% cyber tie cost, and what is not stated about access and safety.

Threat Intel30 Sept 2026

Zimbra's CVE ID came 24 days after the patch. Microsoft's earliest dated probing is day 8

The dates, the score and the versions checked against Zimbra, NVD, CISA and Microsoft. What a patch does not remove from a hit mail server, the one victim count that exists, and a defender checklist.

Page 27

Wednesday 30 September

Editorial illustration for the briefing: SlowMist logs Bitget attacker activity from 31 August, Mandiant dates access to 24 September, neither names a product

Breaches and Incidents30 Sept 2026

SlowMist logs Bitget attacker activity from 31 August, Mandiant dates access to 24 September, neither names a product

Two forensic documents published on 30 September add a longer chain, two products, a web shell and a custom withdrawal tool. SlowMist's logs start on 31 August, Mandiant dates the appliance access to 24 September, and neither names a product, vendor or CVE.

Threat Intel30 Sept 2026

A new MikroTik RouterOS flaw is not the exploited one, and CISA changed its fix version from 7.23 to 7.24

CVE-2026-84411 is new, scored 9.8 and not reported exploited. CISA now names 7.24 as the fix, above the newest long-term build 7.23.7, and MikroTik has published no advisory.

Threat Intel30 Sept 2026

Cisco dates the SD-WAN Manager attacks only as 'September', and omits five trains its May table listed

CISA set a federal deadline of Saturday 3 October. What Cisco states and does not, the fix table set against its May one, four names for one flaw, what the UK record says, and a defender checklist.

Breaches and Incidents30 Sept 2026

Microsoft's Titan skipped the token signature check: 17.3 trillion rows counted, two sampled

Faav's write-up counts 17,333,335,124,315 rows from metadata and describes two one-row samples. The endpoint was locked down 4 days after the report, the bounty was $5,000, and Microsoft edited the only account.

Threat Intel30 Sept 2026

543,699 working credentials in public GitHub code: at least 63% predate default push protection

What the Truffle Security count establishes, what its dates probably mean, and the gap it names itself: GitHub can block some secrets at push time, but only the issuer can make a leaked key stop working.

Editorial illustration for the briefing: 808,000 UK businesses were not confident at one or more of nine tasks, and that measures confidence, not skill

Compliance and Regulation30 Sept 2026

808,000 UK businesses were not confident at one or more of nine tasks, and that measures confidence, not skill

The 57 per cent is a share of 1.42 million businesses with staff, mostly micro firms, counted if any one of nine tasks failed a confidence question. Only three of the nine tasks rose since the 2025 report.

Editorial illustration for the briefing: Glow found 13,000 public screenshots; GitHub's CLI gained image attach 8 days before Glow began notifying

AI Security30 Sept 2026

Glow found 13,000 public screenshots; GitHub's CLI gained image attach 8 days before Glow began notifying

Glow's PixelLeak count works out at about 38 images per organisation and says nothing about sensitivity, access or models. The CLI feature the agents lacked shipped on 1 September, 8 days before Glow began notifying.

Editorial illustration for the briefing: Nine of 13 Star Blizzard campaigns are event invitations, and the invitation usually has no attachment

Threat Intel30 Sept 2026

Nine of 13 Star Blizzard campaigns are event invitations, and the invitation usually has no attachment

A count of Microsoft's own timeline, an invitation with nothing to scan, and six labels that reassure without controlling anything: what the RedFlick report establishes about Star Blizzard, and what it leaves open.

Threat Intel30 Sept 2026

Spectre BTR: a Linux root hash in 3 to 5 minutes on two Intel chips, with the kernel fix public since July

VUSec and Sant'Anna's Branch Target Reuse attack read a root hash at 8 bytes per second on two Intel chips. Stale predictor entries were reusable on AMD and Arm too, but nothing leaked there. The kernel fix dates from July.

Editorial illustration for the briefing: Citrix NetScaler was exploited at least 22 days before the patch. The three-day federal clock ends today

Threat Intel30 Sept 2026

Citrix NetScaler was exploited at least 22 days before the patch. The three-day federal clock ends today

Mandiant, eSentire and GreyNoise now date NetScaler exploitation to before the 27 September bulletin. What Mandiant observed and what it did not, how the exploited pair compares with briefing 143, and what to hunt and harden.

Breaches and Incidents30 Sept 2026

France's tax authority learned of the theft 49 days after it began, from the thief's own claim

The French tax administration took 49 days to learn of a theft made with stolen staff passwords, and only from the attacker's own post. What the ANSSI report establishes, what it leaves out, and the checks a UK team can run.

Threat Intel30 Sept 2026

OpenSSL's DTLS leak is scored 8.2 by CISA and 7.4 by Red Hat, and the gap is what OpenSSL did not say

A DTLS retransmission bug can send OpenSSL heap memory to the other side or crash the process. Fixes are public for four branches, premium-only for three and absent for 3.1 to 3.3. No exploitation is reported and no leak size is stated.

Page 28

Wednesday 30 September

Editorial illustration for the briefing: Two of at least 40 ClickFix incidents came through a custom GPT, and the chatgpt.com address proved nothing

Threat Intel30 Sept 2026

Two of at least 40 ClickFix incidents came through a custom GPT, and the chatgpt.com address proved nothing

A confirmed share of at most 5 per cent, four comforting labels and one command the person ran themselves: what Huntress's 28 September report establishes about custom GPTs used as ClickFix lures, and what it leaves open.

Editorial illustration for the briefing: OpenAI's worm-style prompt injection report gives four transcripts and no rate; academics measured 63% elsewhere

AI Security30 Sept 2026

OpenAI's worm-style prompt injection report gives four transcripts and no rate; academics measured 63% elsewhere

What OpenAI's report shows, what it leaves out (a rate, a second infected agent, any test of dots), what AgentWorm, Morris II, Mind Viruses and a Copilot for Word case measured, and which controls break the loop.

Tuesday 29 September

Editorial illustration for the briefing: Dots run on Astra and Sol costs a fifth as much: OpenAI rates both Critical for cyber, and no launch page says so

AI Security29 Sept 2026

Dots run on Astra and Sol costs a fifth as much: OpenAI rates both Critical for cyber, and no launch page says so

Sol reaches 68% of Astra's recent-exploit rate at a fifth of the list price. What the dots appendix measured, why UK Pro users are excluded, what the tiers cost in pounds, and 49 days between Grok Bot and dots.

Market and Supply Chain29 Sept 2026

PhantomSub follows channels, not groups, and a public record of it predates OX's report by 125 days

The headline says groups. The analysis shows a follow of a channel, run inside the paired session, and OSV recorded the behaviour on 26 May. Today the npm registry still serves 85 of the 101 names, and four of the five most downloaded have no public malware record.

Breaches and Incidents29 Sept 2026

DIVD says an AI agent hacked it. Its evidence is tempo and code comments, and the flaw is still unnamed

The record as of 29 September: an intruder that decided each step at machine speed, explained itself in code comments and fought its own tools. The flaw, the attacker, the model and the data outcome are all unstated.

Compliance and Regulation29 Sept 2026

Ofcom is examining an Apple age signal 140 days after go-live: the duty stays with the site

Ofcom's case CW/01358/09/26 examines Aylo's due diligence and testing, not Apple's system. A reading of Ofcom's case page, guidance and the Act on what an investigation is, what highly effective means, and what to ask of any third-party age check.

Editorial illustration for the briefing: Google-owned Wiz offers critical infrastructure a free AI scan. Its terms accept no liability for disruption

AI Security29 Sept 2026

Google-owned Wiz offers critical infrastructure a free AI scan. Its terms accept no liability for disruption

Google's AI scanning offer to critical infrastructure is run by Wiz. Five terms clauses grant permission and disclaim liability; the limits, human review and stopping points sit on a policy page the terms never mention.

Market and Supply Chain29 Sept 2026

A firewall rule opened a VPN path to 50 million immigration records, in an account of the early 2010s

One former security officer's account of a firewall rule that linked a shared VPN to a classified immigration records server. It is a path, not a breach, and it is more than a decade old.

Editorial illustration for the briefing: Elsevier's domain record sat unchanged for 342 days, yet three of its addresses went to a LAPSUS$-branded page

Breaches and Incidents29 Sept 2026

Elsevier's domain record sat unchanged for 342 days, yet three of its addresses went to a LAPSUS$-branded page

A redirect changes where a name points, and the public record shows the registration layer stayed still. What is missing is the layer that moved, the real length of the window, and anything beyond Elsevier's own "no indication".

Editorial illustration for the briefing: Bitget says it found the root cause on 25 September. It described it three days later and names no product

Breaches and Incidents29 Sept 2026

Bitget says it found the root cause on 25 September. It described it three days later and names no product

Bitget's account moved from a compromised backend system to a flaw in an unnamed third-party security product. The two are layers of one chain, not rivals, but the wording around them keeps shifting and the report that would test it is late.

Editorial illustration for the briefing: ShinyHunters: the official record was 105 words on 28 September. On 29 September the Dutch police published a full statement

Breaches and Incidents29 Sept 2026

ShinyHunters: the official record was 105 words on 28 September. On 29 September the Dutch police published a full statement

The record moved in a day: a 40 word police post became a full statement with two suspicions, a custody ruling and a statement that the man was not arrested over Odido. The FBI claim is still a claim, and nothing official links the two.

Editorial illustration for the briefing: Gambit's 27 'compromised' companies match 48 projects on record minus 21 that never left reconnaissance

AI Security29 Sept 2026

Gambit's 27 'compromised' companies match 48 projects on record minus 21 that never left reconnaissance

The headline says three open source AI agents broke into 27 organisations. The recovered chart says 21 of 48 projects never left reconnaissance, 8 more got lesser access, and the one documented chain needed no CVE and no new class of control.

Show 12 more