Cybersecurity Headlines

Agents trying to compromise Wikipedia tools
https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html 
South Korea claims agents were used in bank hacks
https://therecord.media/south-korean-bank-hacks-ai-agents 
ASOS confirms data breach
https://www.ft.com/content/eab7052d-6640-4928-a128-8df73455ba0a 
https://www.bleepingcomputer.com/news/security/asos-confirms-data-breach-after-hacked-in-app-notifications/ 
Contractor fired over FBI data breach
https://www.reuters.com/technology/accenture-contractor-removed-fbi-following-damaging-data-breach-sources-say-2026-10-06/ 
Red Hat's Lightwell shows early returns
https://www.infosecurity-magazine.com/news/red-hat-lightwell-remediates-400/ 
LibreOffice and OpenOffice flaw can run code with no warning
https://thehackernews.com/2026/10/libreoffice-and-openoffice-flaws-let.html 
Ransomware cancels classes at Japanese university
https://therecord.media/osaka-university-cancels-classes-ransomware 
ATM malware creator in court
https://therecord.media/atm-malware-creator-appears-in-nebraska-court 
OpenAI pledges disclosure changes after Australian attack
https://www.abc.net.au/news/2026-10-06/openai-hearing-apology-key-takeaways/107235640 
Get the show notes here: https://cisoseries.com/cybersecurity-news-agents-vs-wikipedia-south-korean-bank-hacks-asos-breached/ 
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Google pauses open-source bug bounties amid AI spam
Ukraine's largest grocery chain hit by extortion attack
Exchange flaw exposes other users' mailboxes
Get the show notes here: https://cisoseries.com/cybersecurity-news-october-6-2026/
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Warlock ransomware continues to exploit year-old SharePoint flaws
ShinyHunters member detained in Jordan
China-aligned espionage group targets American AI policy experts
Get the show notes here: https://cisoseries.com/cybersecurity-news-warlock-continues-sharepoint-exploits-shinyhunters-member-flips-chinas-ai-espionage/
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Read all the stories at CISOSeries.com.
This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon, CISO, American Century Investments, and Nick Espinosa, host, Deep Dive Radio Show.
Missed the live show? Check it out on YouTube.
The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.
Big thanks to our sponsor, Intezer.

If you caught our tips this week, they pointed one direction: investigate everything, and keep the
evidence. That's a hard promise to make with people. It's an easy one to make with forensics that run in under a minute. Intezer. The AI SOC trusted by Salesforce, MGM Resorts and Nvidia.
See it yourself at intezer.com/headlines.

Report suggests AI and quantum threat preparedness is lacking
Authorities seize KillSec extortion group arrest leader
Dozens more prominent websites scraped by OpenAI software
Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-readiness-reports-killsec-takedown-openai-website-scraping/
Huge thanks to our episode sponsor, Intezer

Today's tip: treat every false positive like a bug report against a detection rule. Fix the rule, and that noise stops coming back. Intezer does that for you, so your SOC gets quieter over time instead of louder. Intezer. The AI SOC trusted by Salesforce, MGM Resorts and Nvidia. See it yourself at intezer.com/headlines.