Poetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers

More from Cybersecurity Headlines All episodes →

1. 

   12 Oct 2026 · 8 minNew

   Anthropic restricts Claude, Google Calendar phishing, FBI hack arrest

   CISA's KEV catalog grows by five https://securityaffairs.com/200734/security/u-s-cisa-adds-proftpd-onlyoffice-docs-strapi-apache-struts-and-isc-bind-flaws-to-its-known-exploited-vulnerabilities-catalog.html Calendar phishing becomes a thing https://www.theguardian.com/money/2026/oct/11/calendar-phishing-scam-meeting-renewal-google-microsoft-paypal Canadian cybersecurity executive arrested in FBI hack https://www.cnn.com/2026/10/09/politics/fbi-arrest-shinyhunters-hack Hackers abuse Google Ads, Bing redirects to deliver Claude ClickFix attacks…

2. 

   9 Oct 2026 · 33 minNew

   The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud

   Read the full stories at CISOSeries.com . This week's Department of Know is hosted by Rich Stroffolino, with guests Derek Fisher , Director of the Cyber Defense and Information Assurance Program, Temple University , and Chris Ray , field CTO, GigaOm . Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com . Big thanks to our sponsor, Vanta! Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings…

3. 

   9 Oct 2026 · 8 min

   Top level domain theft, Yandex attacked, Cisco Nexus flaws

   Attackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major Yandex data center in Russia hit by Ukrainian drone https://therecord.media/yandex-russia-drone-ukraine Cisco warns of critical flaws allowing Nexus switch takeover https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover/ Attackers target Atlassian vulnerability shortly after PoC publication…

4. 

   7 Oct 2026 · 8 min

   Agents vs Wikipedia, South Korean bank hacks, ASOS breached

   Agents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html South Korea claims agents were used in bank hacks https://therecord.media/south-korean-bank-hacks-ai-agents ASOS confirms data breach https://www.ft.com/content/eab7052d-6640-4928-a128-8df73455ba0a https://www.bleepingcomputer.com/news/security/asos-confirms-data-breach-after-hacked-in-app-notifications/ Contractor fired over FBI data breach https://www.reuters.com/technology/accenture-contractor-removed-fbi-following-damaging-data-breach-sources-say-2026-10-06/ Red Hat's…

5. 

   6 Oct 2026 · 8 min

   Google pauses bug bounties, ATB faces extortion, Exchange flaw exposes mailboxes

   Google pauses open-source bug bounties amid AI spam Ukraine's largest grocery chain hit by extortion attack Exchange flaw exposes other users' mailboxes Get the show notes here: https://cisoseries.com/cybersecurity-news-october-6-2026/ Huge thanks to our sponsor, Vanta Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn…

6. 

   5 Oct 2026 · 7 min

   Warlock continues SharePoint exploits, ShinyHunters member flips China's AI espionage

   Warlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI policy experts Get the show notes here: https://cisoseries.com/cybersecurity-news-warlock-continues-sharepoint-exploits-shinyhunters-member-flips-chinas-ai-espionage/ Huge thanks to our sponsor, Vanta Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running…

7. 

   2 Oct 2026 · 39 min

   The Department of Know: ShinyHunters vs FBI, Kiteworks shutdown, and hundreds of orgs hit by rogue AI

   Read all the stories at CISOSeries.com . This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon , CISO, American Century Investments , and Nick Espinosa , host, Deep Dive Radio Show . Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com . Big thanks to our sponsor, Intezer. If you caught our tips this week, they pointed one direction: investigate everything, and keep the evidence. That's a hard promise to make with people. It's an…

8. 

   2 Oct 2026 · 8 min

   AI readiness reports, KillSec takedown, OpenAI website scraping

   Report suggests AI and quantum threat preparedness is lacking Authorities seize KillSec extortion group arrest leader Dozens more prominent websites scraped by OpenAI software Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-readiness-reports-killsec-takedown-openai-website-scraping/ Huge thanks to our episode sponsor, Intezer Today's tip: treat every false positive like a bug report against a detection rule. Fix the rule, and that noise stops coming back. Intezer does that for you, so your SOC gets quieter over time instead of louder. Intezer . The AI SOC trusted by…