"Google hardens chrome against ClickFix attacks, insecure HTTP connections."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 21 October 2026, 2343 UTC.

Content and Source:  "SecurityWeek" via email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

101K followers51 articles per week

#security#tech

79

Today

Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

Chrome strengthens Safe Browsing protections

•

by Eduard Kovacs / 6h

Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis. The post appeared first on SecurityWeek .

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

2 TTPs

•

by Ionut Arghire / 6h

The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications. The post appeared first on SecurityWeek .

‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

by Kevin Townsend / 8h

Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 23-fold. The post appeared first on SecurityWeek .

AI won't replace devs. It'll change their job

by Corelight

sponsored

AI codes confidently. It also hallucinates. Cybersecurity pros say devs must do this to stay safe.

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

10 TTPs

•

by Kevin Townsend / 8h

Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents. The post appeared first on SecurityWeek .

Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security

Asymptote raises funding for agent safeguards

•

by SecurityWeek News / 10h

Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform. The post appeared first on SecurityWeek .

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

by Ionut Arghire / 10h

The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities. The post appeared first on SecurityWeek .

OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor

OpenAI agents disabled monitoring alerts

•

by Eduard Kovacs / 10h

In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it. The post appeared first on SecurityWeek .

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys

2 TTPs

•

by Ionut Arghire / 12h

•

Browsers block compromised eMudhra certificates

The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them. The post appeared first on SecurityWeek .

China Defends DeepSeek After US Ban of Its AI From Government Systems

China opposes US DeepSeek ban

•

by Associated Press / 12h

The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems. The post appeared first on SecurityWeek .

Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor

by Ionut Arghire / 13h

Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable. The post appeared first on SecurityWeek .

Yesterday

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

2 TTPs

•

by Ionut Arghire / 16h

•

CVE-2026-109618

Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. The post appeared first on SecurityWeek .

Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI

Credential Access (Enterprise TA0006)

•

by Eduard Kovacs / 17h

•

OVHcloud CLI compromised in attack

Researchers say the developer’s account was compromised in March with a GlassWorm-linked loader. The post appeared first on SecurityWeek .

Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities

Foundation strengthens utility cyber defenses

•

by Eduard Kovacs / 19h

The first phase will cover up to 500 utilities, which will get free security tools, equipment, deployment help and training. The post appeared first on SecurityWeek .

US Agencies Detail Incident Response Practices for Rogue AI Agents

Agencies issue AI incident guidance

•

by Kevin Townsend / 1d

NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents. The post appeared first on SecurityWeek .

AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign

10 TTPs

•

by Ionut Arghire / 1d

•

AOMEI update servers deliver backdoor

Across multiple short compromise windows, users were served a downloader for the ShinyRoad modular backdoor framework. The post appeared first on SecurityWeek .

The Key to AI Software Security Isn’t Speed, It’s Maturity

by Matias Madou / 1d

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk. The post appeared first on SecurityWeek .

Ahold Delhaize Restoring Services Disrupted by Cyberattack

Cyberattack disrupts grocery digital services

•

by Ionut Arghire / 1d

The company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days. The post appeared first on SecurityWeek .

AI Platform Cairn Abused to Hack Over 100 Organizations

5 TTPs

•

by Ionut Arghire / 1d

•

AI agents breach 100 websites

At least three threat actors have been abusing Cairn for persistent access and financial theft. The post appeared first on SecurityWeek .

Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say

OpenAI engineer booked one-way flight

•

by Associated Press / 1d

Abdulrahman Alfozan’s wife and young son also left the country the day after the 35-year-old Saudi national’s arrest. The post appeared first on SecurityWeek .

Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring

Microsoft secures Windows AI agents

•

by Eduard Kovacs / 1d

Microsoft says companies should treat AI agents as insiders, and is adding controls that grant access per task and tighten it as an agent’s risk rises. The post appeared first on SecurityWeek .

Hackers Steal 1.8 Million Records From Nikkei

2 TTPs

•

by Ionut Arghire / 1d

•

Nikkei exposes two million records