"Ex-OpenAI worker accused of bugging conference room planned to fly to Saudi Arabia."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 20 October 2026, 1254 UTC.

Content and Source:  "SecurityWeek" via email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

101K followers48 articles per week

#security#tech

62

Today

Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say

by Associated Press / 9min

Abdulrahman Alfozan’s wife and young son also left the country the day after the 35-year-old Saudi national’s arrest. The post appeared first on SecurityWeek .

Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring

Microsoft secures Windows AI agents

•

by Eduard Kovacs / 1h

Microsoft says companies should treat AI agents as insiders, and is adding controls that grant access per task and tighten it as an agent’s risk rises. The post appeared first on SecurityWeek .

Hackers Steal 1.8 Million Records From Nikkei

2 TTPs

•

by Ionut Arghire / 2h

•

Nikkei exposes two million records

The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth. The post appeared first on SecurityWeek .

Yesterday

970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach

2 TTPs

•

by Eduard Kovacs / 3h

Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals. The post appeared first on SecurityWeek .

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks

9 TTPs

•

by Eduard Kovacs / 18h

•

CVE-2026-110936

Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures. The post appeared first on SecurityWeek .

Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

2 TTPs

•

by Ionut Arghire / 21h

Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules. The post appeared first on SecurityWeek .

Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack

Rank Math update carried malware

•

by Ionut Arghire / 21h

Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16. The post appeared first on SecurityWeek .

ConnectWise Suspends Cloud Services in Response to Cyberattack

IoC > 1 IP

•

by Ionut Arghire / 23h

•

9 TTPs

•

ConnectWise investigates backup access attempts

The services remain unavailable as the company continues remediation and security validation. The post appeared first on SecurityWeek .

Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

6 TTPs

•

by Eduard Kovacs / 1d

•

TL-2026-3858

Threat actors have been observed delivering cryptocurrency miners and proxy software. The post appeared first on SecurityWeek .

One Compromised Login Exposed Millions of California Students’ Records

Valid Accounts (Enterprise T1078)

•

by Eduard Kovacs / 1d

•

California students hit by breach

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006. The post appeared first on SecurityWeek .

Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack

9 TTPs

•

by Ionut Arghire / 1d

•

CVE-2025-61624

The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post appeared first on SecurityWeek .

Oct 18, 2026

MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks

15 TTPs

•

by Eduard Kovacs / 1d

•

ATTACK v20 expands threat coverage

Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics. The post appeared first on SecurityWeek .

Anthropic Acquires Confidential AI Startup Opaque Systems

Anthropic acquires Opaque

•

by Eduard Kovacs / 1d

Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underlying hardware. The post appeared first on SecurityWeek .

US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars

by Kevin Townsend / 2d

CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag. The post appeared first on SecurityWeek .

Oct 17, 2026

Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel

3 TTPs

•

by Ionut Arghire / 3d

•

Spyware infects phones through ads

Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets. The post appeared first on SecurityWeek .

Oct 16, 2026

In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

8 TTPs

•

by SecurityWeek News / 3d

Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack. The post appeared first on SecurityWeek .

BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts

Cyberattack disrupts bankruptcy notices nationwide

•

by Eduard Kovacs / 4d

A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week. The post appeared first on SecurityWeek .

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

9 TTPs

•

by Ionut Arghire / 4d

•

CVE-2026-102764

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post appeared first on SecurityWeek .

OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks

AI agents breach security boundaries

•

by Eduard Kovacs / 4d

Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report. The post appeared first on SecurityWeek .

F5, Juniper Networks Patch Critical Vulnerabilities

3 TTPs

•

by Ionut Arghire / 4d