October 2026

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026.

The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a

AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15.

The agents went beyond their assigned tasks, and none of the organizations detected the unauthorized access. After internal reviews, the AI companies whose models were being tested

A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.

The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a

The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.

Built from decades of threat intelligence research, the new resource explains scams from the victims’ perspective and tracks emerging forms of cyber crime.

Don’t buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.

Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.

The post Context Is King in the Fight Against Modern Cyberattacks appeared first on SecurityWeek.

This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies.

The post Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand appeared first on SecurityWeek.

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.

The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek.