Cybersecurity Headlines

Attackers hijack three top level domains to obtain Google certificates
https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/
Major Yandex data center in Russia hit by Ukrainian drone
https://therecord.media/yandex-russia-drone-ukraine
Cisco warns of critical flaws allowing Nexus switch takeover
https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover/
Attackers target Atlassian vulnerability shortly after PoC publication
https://www.securityweek.com/attackers-target-critical-atlassian-vulnerability-within-hours-of-poc-publication/
Wazza Phishkit targets banking, government, and manufacturing
https://thehackernews.com/2026/10/wazza-phishkit-targets-banking.html
Shai-Hulud worm moves to AI infrastructure with Tensorlake compromise
https://www.theregister.com/security/2026/10/08/shai-hulud-worm-makes-jump-to-ai-infrastructure-with-tensorlake-compromise/5302054
Japan sees sharp rise in web data leaks
https://thehackernews.com/2026/10/japan-sees-sharp-rise-in-web-data-leaks.html
DOJ charges ransomware recovery CEO for secretly paying hackers
https://therecord.media/ransomware-recovery-charges-doj
Get the show notes here: https://cisoseries.com/cybersecurity-news-top-level-domain-theft-yandex-attacked-cisco-nexus-flaws/
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Botnet takes orders from a poem
https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/
Flock's warrantless tracking hits a roadblock
https://therecord.media/oklahoma-flock-ruing-supreme-court-chatrie-decision
npm packages come with unwanted extras
https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html
AWS gives AI agents a sandbox with house rules
https://www.theregister.com/ai-and-ml/2026/10/07/aws-launches-open-source-ai-agent-sandbox-to-prevent-yolo-mode-disasters/5301687
Outlook closes the door on risky installers
https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-to-block-msix-attachments-used-in-attacks/
Arizona court breach reaches back 30 years
https://therecord.media/arizona-courts-say-hackers-stole-info-on-over-1-million
Utility customers' accounts exposed
https://www.securityweek.com/georgia-power-alabama-power-data-breach-hits-400000-accounts/
FortiBleed changes the locks on VPN admins
https://www.bleepingcomputer.com/news/security/fbi-ongoing-fortibleed-attacks-lock-out-fortigate-vpn-admins/
Get the show notes here: https://cisoseries.com/cybersecurity-news-october-8-2026/
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Agents trying to compromise Wikipedia tools
https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html 
South Korea claims agents were used in bank hacks
https://therecord.media/south-korean-bank-hacks-ai-agents 
ASOS confirms data breach
https://www.ft.com/content/eab7052d-6640-4928-a128-8df73455ba0a 
https://www.bleepingcomputer.com/news/security/asos-confirms-data-breach-after-hacked-in-app-notifications/ 
Contractor fired over FBI data breach
https://www.reuters.com/technology/accenture-contractor-removed-fbi-following-damaging-data-breach-sources-say-2026-10-06/ 
Red Hat's Lightwell shows early returns
https://www.infosecurity-magazine.com/news/red-hat-lightwell-remediates-400/ 
LibreOffice and OpenOffice flaw can run code with no warning
https://thehackernews.com/2026/10/libreoffice-and-openoffice-flaws-let.html 
Ransomware cancels classes at Japanese university
https://therecord.media/osaka-university-cancels-classes-ransomware 
ATM malware creator in court
https://therecord.media/atm-malware-creator-appears-in-nebraska-court 
OpenAI pledges disclosure changes after Australian attack
https://www.abc.net.au/news/2026-10-06/openai-hearing-apology-key-takeaways/107235640 
Get the show notes here: https://cisoseries.com/cybersecurity-news-agents-vs-wikipedia-south-korean-bank-hacks-asos-breached/ 
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Google pauses open-source bug bounties amid AI spam
Ukraine's largest grocery chain hit by extortion attack
Exchange flaw exposes other users' mailboxes
Get the show notes here: https://cisoseries.com/cybersecurity-news-october-6-2026/
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Warlock ransomware continues to exploit year-old SharePoint flaws
ShinyHunters member detained in Jordan
China-aligned espionage group targets American AI policy experts
Get the show notes here: https://cisoseries.com/cybersecurity-news-warlock-continues-sharepoint-exploits-shinyhunters-member-flips-chinas-ai-espionage/
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.