"ICS-sniper attack" and "$250K chrome exploit."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 16 October 2026, 2252 UTC.

Content and Source:  "SecurityWeek" via email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

101K followers52 articles per week

#security#tech

46

Today

In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

8 TTPs

•

by SecurityWeek News / 8h

Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack. The post appeared first on SecurityWeek .

BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts

Cyberattack disrupts bankruptcy notices nationwide

•

by Eduard Kovacs / 11h

A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week. The post appeared first on SecurityWeek .

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

9 TTPs

•

by Ionut Arghire / 11h

•

CVE-2026-102764

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post appeared first on SecurityWeek .

OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks

OpenAI agents breach sites wallets

•

by Eduard Kovacs / 12h

Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report. The post appeared first on SecurityWeek .

F5, Juniper Networks Patch Critical Vulnerabilities

3 TTPs

•

by Ionut Arghire / 12h

Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post appeared first on SecurityWeek .

Yesterday

Microsoft Patches Two Dozen RCE Flaws in Office

Privilege Escalation (Enterprise TA0004)

•

by Ionut Arghire / 14h

In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office. The post appeared first on SecurityWeek .

Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

Proofpoint acquires Varonis for billions

•

by Eduard Kovacs / 15h

The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company. The post appeared first on SecurityWeek .

Context Is King in the Fight Against Modern Cyberattacks

by Etay Maor / 1d

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate. The post appeared first on SecurityWeek .

UK Legal Aid Agency Hack Scope Widens After Forensic Review

Exfiltration (Enterprise TA0010)

•

by Ionut Arghire / 1d

•

Hackers steal UK legal records

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025. The post appeared first on SecurityWeek .

Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers

2 TTPs

•

by Eduard Kovacs / 1d

•

Hackers spoil French supermarket food

Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility. The post appeared first on SecurityWeek .

CikaBika Bot RAT Uses Discord for C&C

17 TTPs

•

by Ionut Arghire / 1d

Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities. The post appeared first on SecurityWeek .

Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies

Hirudo replaces banking apps

•

by Kevin Townsend / 1d

The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT. The post appeared first on SecurityWeek .

Oct 14, 2026

CenterPoint Energy Data Breach Impacts 1 Million Texans

Exfiltration (Enterprise TA0010)

•

by Ionut Arghire / 1d

•

CenterPoint breach affects million Texans

Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised. The post appeared first on SecurityWeek .

CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO

by Kevin Townsend / 1d

James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope. The post appeared first on SecurityWeek .

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

3 TTPs

•

by Eduard Kovacs / 1d

•

CVE-2026-0311 & 11 others

The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The post appeared first on SecurityWeek .

Cisco Warns of Exploited Secure Email Gateway Vulnerability

2 TTPs

•

by Ionut Arghire / 1d

•

CVE-2026-76519

Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post appeared first on SecurityWeek .

AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds

AI agents breach industrial systems

•

by Kevin Townsend / 2d

In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes. The post appeared first on SecurityWeek .

ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw

by Eduard Kovacs / 2d

ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability. The post appeared first on SecurityWeek .

Harmonic Security Raises $50 Million for Workforce AI Protection

Harmonic raises 50M for AI security

•

by Ionut Arghire / 2d

The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK. The post appeared first on SecurityWeek .

Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand

by SecurityWeek News / 2d

This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies. The post appeared first on SecurityWeek .

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages

6 TTPs

•

by Eduard Kovacs / 2d

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man. The post appeared first on SecurityWeek .

US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms

4 TTPs

•

by Ionut Arghire / 2d

•

US disrupts DPRK IT scheme