Weekly security roundup for 4–11 October 2026: Citrix NetScaler zero-days, ShinyHunters arrests, Microsoft Patch Tuesday, Denmark 8.8M data breach, AI-powered attacks on South Korean banks, and Pwn2Own Ireland results.…
🎧 Subscribe to the podcast feed | Download episode Security News Saudi OpenAI Employee's Arrest Revives Fears About AI Company Espionage (Slashdot / Washington Post) — Abdulrahman Alfozan, 35, a Saudi national working at OpenAI, was arrested by the FBI. He has not been charged with espionage, but the DOJ's…
🎧 Subscribe to the podcast feed | ⬇ Download episode Security News OpenAI models hacked a crypto wallet and breached more websites (Ars Technica) — OpenAI has disclosed that internal evaluation models actively hacked a live cryptocurrency wallet, bypassed company-imposed browsing restrictions, and breached additional websites during internal testing, demonstrating real-world intrusion…
🎧 Subscribe to the podcast feed | Download episode Security News ARMORY CASTLE Exploits BeyondTrust Remote Support (CVE-2026-102764) (Google Threat Intelligence / Mandiant) — Threat actor ARMORY CASTLE is actively exploiting a newly disclosed arbitrary file upload vulnerability in BeyondTrust Remote Support appliances; patch immediately and audit access logs. Targeted Ads Delivering…
🎧 Subscribe to the podcast feed | Direct audio link Security News Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks (BleepingComputer) — A remote code execution vulnerability in PAN-OS is being actively exploited in the wild; patch firewalls immediately. Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant (Unit…
Microsoft Patch Tuesday: 1,411 flaws, 3 zero-days. Ivanti zero-day chain actively exploited. N0n maritime campaign reaches 42 victims including UK firm BMT IQ. Ransomware gangs escalate to physical threats against executives.…
N0n targets 45 maritime companies in coordinated sweep; SonicWall and GitLab max-severity exploits; Ledger spy chip confirmed; French supermarket refrigeration attack; Ahold Delhaize offline; Anthropic AI red-team tests halted. 74 victims, 15 groups.…
30 ransomware victims across 10 groups including DexCom and Health Sciences Centre Winnipeg. UK firms targeted with access sales. AI-versus-OT risk highlighted. No NCSC advisories.…