Your AI Assistant Is Becoming a New Route Into Your Accounts
Connecting an assistant to email, documents and business software changes the account-security picture. The assistant can now retrieve private material and, depending on the integration,…
Tracking Pixels Are a Compliance Liability Most Sites Never Audit
Hospital settlements, FTC cases, VPPA and CIPA suits and European fines all trace back to marketing tags nobody checked. Here is what a real pixel audit looks like.
Datadog Offers Nearly 4 Billion Dollars for Israeli Cloud Security Startup Upwind
Datadog has offered close to $4 billion for Upwind Security, but the Israeli cloud security startup has not accepted and is finalizing a $300 million round at a valuation of about $3.8 billion.
Cloudflare Deploys PHP2Shell Defenses as Critical PHP Flaws Put Websites at Risk
Precautionary website shutdowns spread as organizations race to patch PHP2Shell, while Cloudflare deploys firewall defenses and security agencies urge immediate action.
Cybersecurity Digest, October 19, 2026: AI-Powered Intrusions, Cloud Compromises and Critical Infrastructure Vulnerabilities
The cybersecurity landscape is changing in ways that make traditional distinctions between sophisticated attackers and ordinary cybercriminals increasingly difficult to maintain. Today’s developments illustrate the…
Continuum AI Pushes Autonomous Cybersecurity From Vulnerability Discovery Toward Tested Repairs
Continuum AI has introduced OrcaCyber Zero 1.5, a cybersecurity reasoning model designed to investigate vulnerabilities, validate exploitability and support remediation. The model includes a million-token context…
Japan’s Cybersecurity Warning Gains Urgency as Disclosed Incidents Surpass Last Year’s Total
TrendAI has issued a threat advisory for organizations in Japan after its researchers found that publicly disclosed incidents during the first nine months of 2026 exceeded…
Lattice Brings Post-Quantum Security to the Firmware Beneath AI Infrastructure
Lattice Sentry 5.0 brings post-quantum cryptography to firmware protection and device attestation, addressing the trusted foundations beneath AI infrastructure.
An AI-Cloned CEO Voice Exposes the Security Risk of Obeying the Boss
KnowBe4’s Singapore survey highlights how executive authority and misplaced confidence can encourage employees to obey an AI-cloned CEO voice before verifying it.
Billington Critical Infrastructure CyberSecurity Summit, Nov. 17–18, 2026, San Antonio, Texas
Nearly 30 speakers are confirmed for the inaugural Billington Critical Infrastructure CyberSecurity Summit, bringing energy, communications, transportation and water security leaders to San Antonio on November 17–18, 2026.
CrowdStrike Faces Another Stock Split, but This Time It Is the Canadian Depositary Receipt
CrowdStrike is approaching another stock-related corporate action, although investors should distinguish between the cybersecurity company’s Nasdaq-listed shares and its Canadian Depositary Receipts (CDRs). The upcoming…
IonQ to Acquire Cybersecurity Firm Elisity in $1.3 Billion All-Stock Deal, Expanding Beyond Quantum Computing
Quantum computing company IonQ has agreed to acquire cybersecurity firm Elisity in an all-stock transaction valued at up to $1.3 billion, marking a significant expansion…
Hadrian Raises $40 Million to Fight the Emerging AI Hacking Crisis
Cybersecurity company Hadrian has raised $40 million in new funding as the security industry prepares for a fundamental change in the economics of hacking: artificial…
Cybersecurity Weekly: Zero-Days Hit the Internet’s Defensive Edge as AI Starts Changing the Attack Cycle
The most important cybersecurity story of the past week was not a single breach but a remarkable concentration of attacks against the systems that are…
Trust Only Software That Can Explain Itself
I’ve put five project sites online lately. AltSql, VPN Works, Precomputing, Preconfiguration, BareProxy. Most of that happened in September; BareProxy squeezed in during the first…
Zenity AI Agent Security Summit New York 2026, October 21, Pier Sixty, New York
The New York edition moves to Chelsea Piers and changes the focus. It covers what happens as agents gain autonomy and anyone in a company…
Zenity AI Agent Security Summit London 2026, October 8, 8 Bishopsgate, London
Zenity is taking its agent security summit outside the US for the first time. The London day looks at what autonomous agents mean for Europe:…
SecTor 2026, October 6–8, Metro Toronto Convention Centre, Toronto
SecTor has run since 2007. It’s Canada’s largest security conference and part of Black Hat’s global portfolio. This year’s lineup has more than 40 briefings…
Cyera Takes $400 Million From Goldman Sachs, Pushing Its 2026 Funding to $1.4 Billion
Cyera has raised another $400 million, this time from the Growth Equity arm of Goldman Sachs Alternatives. The money extends the company’s Series G, which…
Visa Buys BioCatch, Munich Re Buys At-Bay: The Biggest Cybersecurity Buyers Aren’t Security Companies
August’s 33 cybersecurity deals were led by Visa and Munich Re, not by security vendors. The pure-plays spent their money on AI agent defence, while H1 funding held at $10.6 billion with a soft second quarter.
Flock Safety Cameras Run Android 8.1 With Hardcoded API Keys, Researchers Find
Reverse engineering of recovered Flock licence plate cameras found Android 8.1, a 2018 patch level, an embedded API key and plaintext Auth0 credentials. Cities are cancelling, and municipal procurement language is what changes next.
Brevo Supply Chain Attack Pushed ClickFix Malware to 100,000 Sites Through One Hardcoded Cloudflare Key
A hardcoded Cloudflare API key in Brevo’s source let attackers rewrite content at the CDN edge and serve ClickFix prompts and a WordPress backdoor across up to 100,000 sites in five and a half hours.
FBI and Coast Guard Boarded Hacked Oil Tankers, and Maritime OT Security Became a Budget Line
Two US-bound tankers were boarded in the Gulf of Mexico after their networks were compromised at sea, with a third hit off Italy and about twenty ships being watched. Marine underwriters and charterers are the ones who’ll force the spending.
IDScan Breach Exposes 153 Million Driver’s License Scans and the ID Verification Market Pays for It
IDScan confirmed a year-long intrusion that exposed more than 150 million driver’s license scans across the US and Canada. A licence image is a credential nobody can rotate, and the KYC industry built the stockpile.