Warlock continues SharePoint exploits, ShinyHunters member flips China's AI espionage

More from Cybersecurity Headlines

1. 

   8 Oct 2026 · 7 minNew

   Poetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers

   Botnet takes orders from a poem https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/ Flock's warrantless tracking hits a roadblock https://therecord.media/oklahoma-flock-ruing-supreme-court-chatrie-decision npm packages come with unwanted extras https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html AWS gives AI agents a sandbox with house rules https://www.theregister.com/ai-and-ml/2026/10/07/aws-launches-open-source-ai-agent-sandbox-to-prevent-yolo-mode-disasters/5301687 Outlook closes the door on risky installers…

2. 

   7 Oct 2026 · 8 minNew

   Agents vs Wikipedia, South Korean bank hacks, ASOS breached

   Agents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html South Korea claims agents were used in bank hacks https://therecord.media/south-korean-bank-hacks-ai-agents ASOS confirms data breach https://www.ft.com/content/eab7052d-6640-4928-a128-8df73455ba0a https://www.bleepingcomputer.com/news/security/asos-confirms-data-breach-after-hacked-in-app-notifications/ Contractor fired over FBI data breach https://www.reuters.com/technology/accenture-contractor-removed-fbi-following-damaging-data-breach-sources-say-2026-10-06/ Red Hat's…

3. 

   6 Oct 2026 · 8 min

   Google pauses bug bounties, ATB faces extortion, Exchange flaw exposes mailboxes

   Google pauses open-source bug bounties amid AI spam Ukraine's largest grocery chain hit by extortion attack Exchange flaw exposes other users' mailboxes Get the show notes here: https://cisoseries.com/cybersecurity-news-october-6-2026/ Huge thanks to our sponsor, Vanta Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn…

4. 

   2 Oct 2026 · 39 min

   The Department of Know: ShinyHunters vs FBI, Kiteworks shutdown, and hundreds of orgs hit by rogue AI

   Read all the stories at CISOSeries.com . This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon , CISO, American Century Investments , and Nick Espinosa , host, Deep Dive Radio Show . Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com . Big thanks to our sponsor, Intezer. If you caught our tips this week, they pointed one direction: investigate everything, and keep the evidence. That's a hard promise to make with people. It's an…

5. 

   2 Oct 2026 · 8 min

   AI readiness reports, KillSec takedown, OpenAI website scraping

   Report suggests AI and quantum threat preparedness is lacking Authorities seize KillSec extortion group arrest leader Dozens more prominent websites scraped by OpenAI software Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-readiness-reports-killsec-takedown-openai-website-scraping/ Huge thanks to our episode sponsor, Intezer Today's tip: treat every false positive like a bug report against a detection rule. Fix the rule, and that noise stops coming back. Intezer does that for you, so your SOC gets quieter over time instead of louder. Intezer . The AI SOC trusted by…

6. 

   1 Oct 2026 · 7 min

   Gemini 4 enters the ring, MI5 flags research ties, Custom GPTs deliver malware

   Gemini 4 starts with cybersecurity MI5 flags Chinese research funding Custom GPTs steer users into ClickFix attacks Get the show notes here: https://cisoseries.com/cybersecurity-news-october-1-2026/ Huge thanks to our episode sponsor, Intezer Today's tip: add up the hours your tier-one analysts spent closing alerts that turned out to be nothing. That's your real triage cost. At a hundred and fifty enterprises, that work isn't done by hand. Intezer investigates every alert. Intezer . The AI SOC trusted by Salesforce, MGM Resorts and Nvidia. See it yourself at intezer.com/headlines .

7. 

   9 Oct 2026 · 33 minNew

   The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud

   Read the full stories at CISOSeries.com . This week's Department of Know is hosted by Rich Stroffolino, with guests Derek Fisher , Director of the Cyber Defense and Information Assurance Program, Temple University , and Chris Ray , field CTO, GigaOm . Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com . Big thanks to our sponsor, Vanta! Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings…

8. 

   9 Oct 2026 · 8 minNew

   Top level domain theft, Yandex attacked, Cisco Nexus flaws

   Attackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major Yandex data center in Russia hit by Ukrainian drone https://therecord.media/yandex-russia-drone-ukraine Cisco warns of critical flaws allowing Nexus switch takeover https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover/ Attackers target Atlassian vulnerability shortly after PoC publication…

9. 

   30 Sep 2026 · 8 min

   Star Blizzard, Cloudflare CA, GPT-6.1 scuttled

   Microsoft details new Star Blizzard and NeedyMantis activity Cloudflare to become a public certificate authority Safety concerns scuttle GPT-6.1 Get the show notes here: https://cisoseries.com/cybersecurity-news-star-blizzard-cloudflare-ca-gpt-6-1-scuttled/ Huge thanks to our episode sponsor, Intezer Today's tip: when an AI calls an alert benign, ask for the evidence. The file, the memory, the command line. If it can't show its work, it's guessing. Intezer shows its work, and your team can argue with it. Intezer . The AI SOC trusted by Salesforce, MGM Resorts and Nvidia. See it yourself at…

10. 

    29 Sep 2026 · 8 min

    GPT-6 Astra goes off script, ShinyHunters suspect arrested, Nvidia corrals rogue AI agents

    GPT-6 Astra goes off script in attack simulations Dutch police arrest "reformed" hacker in ShinyHunters probe Nvidia builds a browser for AI agents Get the show notes here: https://cisoseries.com/cybersecurity-news-september-29-2026/ Huge thanks to our episode sponsor, Intezer Today's tip: time how long an employee-reported phish waits for a verdict. If it's a day, someone already clicked. Salesforce's incident response team got that down to minutes with Intezer . At their size, one click is plenty. Intezer. The AI SOC trusted by Salesforce, MGM Resorts and Nvidia. See it yourself at…

Every episode of Cybersecurity Headlines →