https://samj-01.github.io/patch-notes/ Hands-on cyber security and IT for beginners: learn how attacks work and how to defend against them, with labs, missions, games and the daily security news explained. en Sun, 18 Oct 2026 10:33:03 +0000 https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html Sun, 18 Oct 2026 08:23:00 +0000 The Hacker News ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and… Via The Hacker News. https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/ https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/ Sat, 17 Oct 2026 15:18:00 +0000 BleepingComputer ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...] Via BleepingComputer. https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/ https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/ Sat, 17 Oct 2026 14:32:00 +0000 BleepingComputer Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...] Via BleepingComputer. https://www.theregister.com/security/2026/10/17/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems/5303677 https://www.theregister.com/security/2026/10/17/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems/5303677 Sat, 17 Oct 2026 11:30:00 +0000 The Register 'Hold my beer, have fun getting into your offices' Via The Register. https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html Sat, 17 Oct 2026 11:11:00 +0000 The Hacker News Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on… Via The Hacker News. https://www.securityweek.com/israeli-ad-firm-doubled-as-candirus-zero-click-spyware-delivery-channel/ https://www.securityweek.com/israeli-ad-firm-doubled-as-candirus-zero-click-spyware-delivery-channel/ Sat, 17 Oct 2026 11:00:00 +0000 SecurityWeek Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets. Via SecurityWeek. https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html Sat, 17 Oct 2026 06:16:00 +0000 The Hacker News Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to… Via The Hacker News. https://www.darkreading.com/endpoint-security/beyondtrust-remote-support-exploited-edge-bugs https://www.darkreading.com/endpoint-security/beyondtrust-remote-support-exploited-edge-bugs Fri, 16 Oct 2026 20:34:00 +0000 Dark Reading Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group. Via Dark Reading. https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/ https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/ Fri, 16 Oct 2026 20:00:00 +0000 BleepingComputer Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...] Via BleepingComputer. https://www.darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risk https://www.darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risk Fri, 16 Oct 2026 19:49:00 +0000 Dark Reading Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees. Via Dark Reading. https://www.darkreading.com/data-privacy/biomemory-launches-dna-shield https://www.darkreading.com/data-privacy/biomemory-launches-dna-shield Fri, 16 Oct 2026 19:22:00 +0000 Dark Reading The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year. Via Dark Reading. https://www.darkreading.com/cyber-risk/enterprise-ai-risk-management-phase-security-concerns-rise https://www.darkreading.com/cyber-risk/enterprise-ai-risk-management-phase-security-concerns-rise Fri, 16 Oct 2026 19:13:00 +0000 Dark Reading Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution. Via Dark Reading. https://www.darkreading.com/ics-ot-security/ai-takes-control-robotic-arm-16-minutes https://www.darkreading.com/ics-ot-security/ai-takes-control-robotic-arm-16-minutes Fri, 16 Oct 2026 18:37:00 +0000 Dark Reading Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses. Via Dark Reading. https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html Fri, 16 Oct 2026 17:48:00 +0000 The Hacker News A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP… Via The Hacker News. https://www.bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware/ https://www.bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware/ Fri, 16 Oct 2026 17:20:00 +0000 BleepingComputer Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device. [...] Via BleepingComputer. https://thehackernews.com/2026/10/attackers-tampered-with-aomei.html https://thehackernews.com/2026/10/attackers-tampered-with-aomei.html Fri, 16 Oct 2026 16:43:00 +0000 The Hacker News Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that… Via The Hacker News. https://thehackernews.com/2026/10/uat-11985-uses-fake-event-invites-to.html https://thehackernews.com/2026/10/uat-11985-uses-fake-event-invites-to.html Fri, 16 Oct 2026 16:16:00 +0000 The Hacker News Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed… Via The Hacker News. https://www.theregister.com/security/2026/10/16/networking-problems-after-the-october-2026-windows-update-ntlm-might-be-to-blame/5303503 https://www.theregister.com/security/2026/10/16/networking-problems-after-the-october-2026-windows-update-ntlm-might-be-to-blame/5303503 Fri, 16 Oct 2026 15:30:00 +0000 The Register Legacy protocol is going to be axed, and enforcement by default will highlight how migration is going Via The Register. https://therecord.media/proofpoint-varonis-cybersecurity-acquisition https://therecord.media/proofpoint-varonis-cybersecurity-acquisition Fri, 16 Oct 2026 14:45:00 +0000 The Record Cybersecurity giant Proofpoint says it will acquire Miami-based data visibility and security company Varonis in an all-cash transaction worth $6.3 billion. Via The Record. https://www.securityweek.com/in-other-news-ics-sniper-attack-hacking-xworm-malware-operators-250k-chrome-exploit/ https://www.securityweek.com/in-other-news-ics-sniper-attack-hacking-xworm-malware-operators-250k-chrome-exploit/ Fri, 16 Oct 2026 14:09:00 +0000 SecurityWeek Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack. Via SecurityWeek. https://thehackernews.com/2026/10/openai-research-model-spent-3rd-party.html https://thehackernews.com/2026/10/openai-research-model-spent-3rd-party.html Fri, 16 Oct 2026 14:03:00 +0000 The Hacker News OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network… Via The Hacker News. https://www.darkreading.com/cyber-risk/when-your-ransomware-negotiator-works-other-side https://www.darkreading.com/cyber-risk/when-your-ransomware-negotiator-works-other-side Fri, 16 Oct 2026 14:00:00 +0000 Dark Reading The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight. Via Dark Reading. https://www.bleepingcomputer.com/news/security/employees-using-personal-chatgpt-at-work-heres-what-it-admins-need-to-do/ https://www.bleepingcomputer.com/news/security/employees-using-personal-chatgpt-at-work-heres-what-it-admins-need-to-do/ Fri, 16 Oct 2026 13:50:00 +0000 BleepingComputer Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can investigate unauthorized AI use and… Via BleepingComputer. https://therecord.media/russia-datasuckers-hackers-arrested https://therecord.media/russia-datasuckers-hackers-arrested Fri, 16 Oct 2026 13:30:00 +0000 The Record Russian authorities have reportedly detained three suspected members of the DataSuckers hacking group following a cyberattack on a popular restaurant chain that exposed vast amounts of customer information. Via The Record. https://www.theregister.com/security/2026/10/16/attack-on-bae-managed-system-disrupts-us-bankruptcy-courts/5303487 https://www.theregister.com/security/2026/10/16/attack-on-bae-managed-system-disrupts-us-bankruptcy-courts/5303487 Fri, 16 Oct 2026 13:29:00 +0000 The Register Legal eagles still plodding along with some operations, but paper and e-notices delayed until further notice Via The Register. https://therecord.media/anne-arundel-county-maryland-confirms-data-breach https://therecord.media/anne-arundel-county-maryland-confirms-data-breach Fri, 16 Oct 2026 13:05:00 +0000 The Record Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed. Via The Record. https://therecord.media/beyond-trust-cyberattack-china https://therecord.media/beyond-trust-cyberattack-china Fri, 16 Oct 2026 13:00:00 +0000 The Record An alleged Chinese state-backed group is using a new zero-day affecting BeyondTrust IT support software to conduct espionage attacks. Via The Record. https://www.darkreading.com/insider-threats/ai-agents-breaches-humans-liable https://www.darkreading.com/insider-threats/ai-agents-breaches-humans-liable Fri, 16 Oct 2026 13:00:00 +0000 Dark Reading As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled. Via Dark Reading. https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/ https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/ Fri, 16 Oct 2026 12:01:00 +0000 BleepingComputer Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. [...] Via BleepingComputer. https://www.securityweek.com/bae-systems-security-incident-stalls-notices-from-us-bankruptcy-courts/ https://www.securityweek.com/bae-systems-security-incident-stalls-notices-from-us-bankruptcy-courts/ Fri, 16 Oct 2026 11:46:00 +0000 SecurityWeek A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week. Via SecurityWeek. https://thehackernews.com/2026/10/ai-decision-models-and-their-impact-on.html https://thehackernews.com/2026/10/ai-decision-models-and-their-impact-on.html Fri, 16 Oct 2026 11:30:00 +0000 The Hacker News In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a… Via The Hacker News. https://www.schneier.com/blog/archives/2026/10/backdooring-open-weight-ai-models.html https://www.schneier.com/blog/archives/2026/10/backdooring-open-weight-ai-models.html Fri, 16 Oct 2026 11:04:00 +0000 Schneier on Security This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models… Via Schneier on Security. https://www.securityweek.com/chinese-apt-exploited-beyondtrust-vulnerability-as-zero-day/ https://www.securityweek.com/chinese-apt-exploited-beyondtrust-vulnerability-as-zero-day/ Fri, 16 Oct 2026 10:53:00 +0000 SecurityWeek Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. Via SecurityWeek. https://www.securityweek.com/openai-models-hacked-data-portals-raided-a-crypto-wallet-to-finish-tasks/ https://www.securityweek.com/openai-models-hacked-data-portals-raided-a-crypto-wallet-to-finish-tasks/ Fri, 16 Oct 2026 10:32:00 +0000 SecurityWeek Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report. Via SecurityWeek. https://www.securityweek.com/f5-juniper-networks-patch-critical-vulnerabilities/ https://www.securityweek.com/f5-juniper-networks-patch-critical-vulnerabilities/ Fri, 16 Oct 2026 09:54:00 +0000 SecurityWeek Successful exploitation of some of these issues could lead to remote code execution and full device takeover. Via SecurityWeek. https://www.theregister.com/security/2026/10/16/thief-snatches-school-snappers-sd-cards-in-smash-grab/5303379 https://www.theregister.com/security/2026/10/16/thief-snatches-school-snappers-sd-cards-in-smash-grab/5303379 Fri, 16 Oct 2026 09:15:00 +0000 The Register UK school admits data protection bungle as children's data at risk Via The Register. https://www.bleepingcomputer.com/news/microsoft/kb5127648-windows-security-update-may-break-smart-app-control/ https://www.bleepingcomputer.com/news/microsoft/kb5127648-windows-security-update-may-break-smart-app-control/ Fri, 16 Oct 2026 08:44:00 +0000 BleepingComputer Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update. [...] Via BleepingComputer. https://www.securityweek.com/microsoft-patches-two-dozen-rce-flaws-in-office/ https://www.securityweek.com/microsoft-patches-two-dozen-rce-flaws-in-office/ Fri, 16 Oct 2026 07:55:00 +0000 SecurityWeek In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office. Via SecurityWeek. https://www.bleepingcomputer.com/news/security/bae-systems-cyberattack-disrupts-us-federal-court-operations/ https://www.bleepingcomputer.com/news/security/bae-systems-cyberattack-disrupts-us-federal-court-operations/ Fri, 16 Oct 2026 07:37:00 +0000 BleepingComputer The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts. [...] Via BleepingComputer. https://www.theregister.com/security/2026/10/16/user-refused-to-change-her-password-because-everyone-already-knew-it/5301864 https://www.theregister.com/security/2026/10/16/user-refused-to-change-her-password-because-everyone-already-knew-it/5301864 Fri, 16 Oct 2026 07:28:00 +0000 The Register School staff seemed to be trying to get ransomware – for a second time Via The Register.