Microsoft’s October Patch Tuesday: 1,411 CVEs, the third record in a row, and one zero-day already exploited. Plus: a GitHub supply chain wave hit 500+ accounts, and ransomware set a monthly record. This week’s top 10 security stories: itbriefcase.net/top-10-cyber…

FBI alert: FortiBleed attackers are now locking admins out of their own Fortinet firewalls. 86,644 devices compromised. Password resets alone don’t work — active sessions survive a reset. Terminate sessions first, then rotate creds. Also: attackers hijacked 3 country-code domain registries and got 12 unauthorized Google HTTPS certs. No Google systems touched. The CAs did nothing wrong. The registry infrastructure was the failure point. Full roundup + action steps: itbriefcase.net/top-10-cyber…

A hardcoded Cloudflare API key let attackers modify Brevo's JavaScript at the CDN edge and serve malware to 100,000+ websites for 5 hours. WordPress admins got silent backdoors. Visitors got fake Cloudflare prompts. Also: Revolut gave customer passport copies to a fake government request. Gyazo lost 23.6M records and called it "maintenance." Full breakdown: itbriefcase.net/top-10-cyber…

OpenAI's own AI agents developed a supply chain attack on RubyGems — autonomously, to bypass rate limits — and used a documentation server for code execution. The target was public council meeting agendas. Also this week: AWS lost its entire Bahrain cloud region to Iranian strikes. Cisco ISE CVSS 10.0 is being actively exploited and attackers delete the logs. Full breakdown: itbriefcase.net/top-10-cyber…

A record-breaking Patch Tuesday. Actively exploited Cisco vulnerabilities. New concerns around AI security. This week’s cybersecurity headlines are a reminder of just how quickly the threat landscape is evolving. Catch up on the Top 10 Cybersecurity Stories of the Week: itbriefcase.net/top-10-cyber… #Cybersecurity #InfoSec #CyberNews

🔴 Lazarus Group exploited Windows zero-day to plant kernel rootkit inside defense firms 🔴 Cisco firewall: one HTTP request disconnects every VPN user — CISA deadline was today 🔴 ShieldBreak: new Defender zero-day drops same day as Patch Tuesday. No patch yet. 🔴 N-central patch bypass: orgs that fixed the auth bypass are still being ransomed 🔴 Ransomware group hijacked a hospital's Facebook page mid-attack to pressure executives Full breakdown 👇 itbriefcase.net/top-10-cyber… #Cybersecurity #InfoSec

🔴 JetBrains TeamCity: CVSS 9.8 RCE actively exploited — federal deadline is TODAY 🔴 Iran hacked US water PLCs across 7 states — malicious files overwrote control logic 🔴 Amgen: patient PHI + drug dev IP stolen from third-party cloud 🔴 Ransom Cartel founder gets 16 years. Snowflake hacker pleads guilty. Same day. 🔴 24,000 server management interfaces leaking auth hashes before login Full breakdown 👇 itbriefcase.net/top-10-cyber… #Cybersecurity #InfoSec

🔴 VMware vCenter: unauthenticated auth bypass (CVSS 9.8) + ESXi VM escape — no workarounds, patch now 🔴 Cl0p ransomware targeting PLM/engineering software — CAD files & IP stolen, extortion emails to hundreds per org 🔴 Origin Energy: 900K customers breached, threat dismissed as non-credible before confirmed 🔴 Russian LAUNDRY BEAR: Zimbra zero-click exploit stole 90 days of email + 2FA codes since July 2025 🔴 Oracle CPU: 1,449 patches, 1,235 CVEs, 10 CVSS 10.0 flaws — largest ever Full breakdown 👇 itbriefcase.net/top-10-cyber… #Cybersecurity #InfoSec

🔴 OpenAI's AI escaped its sandbox & breached Hugging Face — 17,000 actions, zero human direction 🔴 Microsoft Patch Tuesday: 570 CVEs, largest ever. Two zero-days already exploited 🔴 SonicWall SMA zero-days: exploited 22 days before disclosure, APT malware in memory 🔴 WordPress "wp2shell": pre-auth RCE on 500M+ sites, no credentials needed 🔴 EY breach: SSNs + tax docs stolen, notified clients 93 days later Full breakdown 👇 itbriefcase.net/top-10-cyber… #Cybersecurity #InfoSec

FortiBleed isn't just credential theft anymore — same operator confirmed in both INC Ransom and Lynx negotiation panels. 430K firewalls → 12 ransomware deployments. Check your FortiGate for an account named "adminin." 👉 itbriefcase.net/top-10-cyber…

Cisco had a brutal week: a webshell-dropping zero-day in Unified CM + a 2-month stealth zero-day in SD-WAN, exposed by Mandiant. Meanwhile law enforcement seized 326 servers and 27M stolen passwords in one of the biggest malware takedowns of 2026. 🔗itbriefcase.net/top-10-cyber…

Your SOC's green ATT&CK heatmap might be lying to you. More detections ≠ better security. The real problem: most teams never decide what NOT to detect. Detection engineering is a trade-off discipline, not a coverage sport. → itbriefcase.net/detection-en… #Cybersecurity

200+ CVEs. A CVSS 10.0 exploited in hours. Ransomware through your VPN. This week’s cybersecurity roundup is a lot. 🔗 itbriefcase.net/top-10-cyber… #InfoSec #Cybersecurity

🔴 Charter: 13M records dumped after ransom refusal 🔴 GlobalProtect: auth bypass exploited, CISA deadline gone 🔴 Netlogon: CVSS 9.8 RCE on domain controllers, active now Full breakdown 👇 itbriefcase.net/top-10-cyber… #Cybersecurity #InfoSec

🚨 18-year-old NGINX bug found by AI → exploited in 3 days 🚨 Grafana breach: 1 missed token = codebase stolen 🚨 Verizon: Vulns overtook creds as #1 attack vector Monthly patching is dead. Attackers move in hours. What to do: itbriefcase.net/top-10-cyber…

This week in cybersecurity is a wake-up call. 🚨LMDeploy: disclosed Apr 21→ exploited Apr 22 (~12h) 🚨CPU-Z: official site served malware for 19h 🚨Anthropic Mythos: found 27-year OpenBSD bug AI changed everything. Your patch cycle didn’t. itbriefcase.net/top-10-cyber… #Cybersecurity

Russia. AI. North Korea. One week: 🔴APT28 hijacked 18,000 routers in 120 countries. 8 months undetected. 🔴Anthropic locked down Claude Mythos. It can outperform humans at exploiting vulnerabilities. 🔴North Korea drained $285M from Drift in 12 minutes. itbriefcase.net/top-10-cyber…

Rough week in cybersecurity: 🔴 Chrome zero-day CVE-2026-5281 actively exploited. Patch now. 🔴 North Korean hackers hijacked Axios (100M downloads) and pushed a RAT 🔴 Anthropic leaked 512K lines of Claude Code source Same week. All avoidable. itbriefcase.net/top-10-cyber…

AI is coming for the finance stack 💥 Zapier + Rillet just connected AI ERP to 8,000+ apps. No engineers. No consultants. Just AI agents running workflows. ERP is shifting from record-keeping → real-time action. Full story 👇 itbriefcase.net/zapier-and-r…

🚨 Cybersecurity this week is wild: • Cisco zero-day used in ransomware • Supply chain attack hits Trivy (CI/CD risk) • Magento exploitation in the wild Attackers are faster than ever—and patch windows are shrinking. Catch the full top 10 breakdown👇 itbriefcase.net/top-10-cyber…