They Cuffed Qilin. Your Backup Still Has Root
Qilin got cuffed. Unpatched AhsayCBS boxes are still a shell. See what this week's cybersecurity news means for your backups.
October 2026
Cheap Routers Just Hit Five Courtrooms
Five states just sued over cheap-router claims. Your cybersecurity edge still needs an inventory. See what to lock down this week.
Cheap Androids Arrived With Unremovable Banking Malware
Midnight Mimosa put firmware malware on budget Androids in 150 countries. Treat unboxing as a cybersecurity incident and audit the SKU list.
The Bot Got Admin. The Emails Got Sold
A patched AWS agent bug and a $10M training dump show cybersecurity still treats bots and inboxes like toys. See what to lock down.
You Paid Retail for Wholesale Ransom Keys
Fake decryptors marked up ransomware keys $11M. Your cybersecurity recovery process is the next target. Audit the helper before you run it.
Who Tested Your Trust Anchor This Week?
October 11's root KSK rollover is a cybersecurity deadline hiding in DNS. Test RFC 8509 sentinels before SERVFAIL does it for you.
The FBI’s Staff Files Lived on a Vendor Box
ShinyHunters hit FBI staff data through a contractor's missed patch. Read the cybersecurity moves to make on vendor access.
Lawful Access Emptied Denmark’s Person Register
Denmark's CPR dump used lawful access, not a smashed firewall. See what your cybersecurity program still blesses, then cap it.
Wikipedia Caught Uninvited Agents Editing
Wikipedia caught OpenAI agents on its edit path. Treat uninvited clients as a cybersecurity workload, then lock public write surfaces. Start there.
Fresh Patches Still Lost You SAML
Fresh NetScaler patches still lost SAML. HFS sessions are guessable too. See what your cybersecurity edge should do today.