🚨 An unpatched Broadcom Wi-Fi flaw lets attackers within radio range execute code as ROOT on affected routers, without a Wi-Fi password or pairing.

Researcher demonstrated password extraction and a remote shell. Potentially impacting millions of routers.

Read - https://thehackernews.com/2026/10/unpatched-broadcom-wi-fi-flaw-lets.html

⚠️ A fake Web3 accelerator is targeting crypto developers with investment offers and free AI tools that deliver malware through npm packages.

The packages deploy a Windows stealer and macOS backdoor, redirect AI agent requests to attacker-controlled services, and generate fake security audit findings.

Read - https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html

AI is testing the limits of post-quantum cryptography.

An Anthropic AI model found an attack that halved HAWK's effective security in just 60 hours, prompting its withdrawal from NIST consideration.

Itan Barmes of QIZ Security explains why cryptographic agility now matters more than ever.

Read: https://thehackernews.com/expert-insights/2026/10/security-rests-on-hard-math-problems.html

OOgly Search's AI had a few recipe suggestions. The user had questions. Legal had a meltdown. 🍕💀

AI: Put glue on your pizza.
User: Excuse me?

AI: Should I recommend eating rocks instead?
User: PLEASE STOP HELPING.

OOgly Search's AI Risk Score just dropped to 375 📉
Monitor AI risk like you monitor your credit score.

Your AI probably isn't recommending glue on pizza. But what risks are hiding in plain sight? 👀

Check your AI Risk Score at https://thn.news/ai-risk-insight

UMAI | AI Risk, Measured

OOgly Search is fictional. The AI incidents that inspired this parody aren't. The score is illustrative, not an actual assessment.

🚨 GhostAction attackers planted a credential stealer disguised as a font file in 94 compromised GitHub repositories.

The malware runs when affected projects are opened in VS Code, steals developer credentials, and adds persistence.

Read - https://thehackernews.com/2026/10/ghostaction-attackers-plant-credential.html

What happens when customer emails become instructions for internal AI agents?

Salesforce Agentforce's standard workflows can create that path without misconfiguration.

The bigger problem: enterprises often lack visibility into their agents, permissions, and exposure.

Here's what needs to change: https://thehackernews.com/2026/10/from-email-to-case-to-boardroom-how.html

⚡ Cloud breach shuts down backups. AI agents go rogue. $100M stolen via wallet backdoors.

Also this week:
→ 98 zero-days exposed
→ 1B phishing messages
→ Remote support flaw exploited
→ 700+ supermarkets hit
→ Malicious developer packages

The full ThreatsDay recap ↓ https://thehackernews.com/2026/10/weekly-recap-98-zero-days-rogue-ai.html

‼️ ALERT - Popular WordPress plugin "Rank Math PRO" delivered malware through official downloads and updates for nearly 11 hours on October 15–16.

Websites that installed and activated affected builds should be treated as compromised.

The malware can recreate hidden backdoors whenever a site is visited.

Upgrading alone is NOT enough.

Details → https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html

🛑 Hackers are exploiting four patched Plex Media Server flaws chained as Plex2Shell to deploy cryptocurrency miners and a Linux proxy backdoor.

Attacks began just one day after exploit details went public. Plex users should update to version 1.43.3.10861 or later.

Read - https://thehackernews.com/2026/10/hackers-exploit-plex2shell-flaws-to.html

⚠️ Researchers uncovered ROMULUS, a ClickFix malware delivery platform with admin panels found on six servers.

It delivers trojanized Stardock installers and LegionLoader, including an 842 MiB executable padded to evade some file-size scanning limits.

Read - https://thehackernews.com/2026/10/romulus-clickfix-platform-tricks-users.html

‼️ A former OpenAI engineer has been ordered detained over an alleged hidden recording device in an executive conference room.

New court filings reveal he was in frequent contact with a Saudi royal family member who reportedly tried to recruit him.

More: https://thehackernews.com/2026/10/ex-openai-engineer-detained-in-spy.html

🚨 Siemens has patched a high-severity Software Center flaw exploited in ClickFix attacks.

Attackers abuse the trusted, digitally signed application to sideload malicious DLLs, with some campaigns deploying remote access trojans.

CVE-2026-110936 | Fixed in v4.0.9.8
Read - https://thehackernews.com/2026/10/clickfix-attackers-exploit-siemens.html

🚨 Attackers hijacked five OVHcloud CLI releases on GitHub, replacing legitimate downloads with malware designed to steal secrets from infected machines.

The malicious files were available for up to 94 minutes on October 19.

Users who downloaded or updated affected builds during that window should rotate exposed secrets.

Read more: https://thehackernews.com/2026/10/hackers-hijack-five-ovhcloud-cli.html

Salesforce Agentforce flaws (dubbed SalesBleed) allowed malicious CRM leads to trigger data exfiltration and phishing across internal Slack threads.

Len Noe of BeyondTrust breaks down why AI agent permissions & message attribution are critical:

🔗 https://thehackernews.com/expert-insights/2026/10/the-least-trusted-author-sets-ai-agents.html

🚨 UPDATE: ConnectWise Cloud Backup remains offline after unauthorized access to application identities.

ConnectWise is resetting accounts and app credentials, while SaaS Security and Cloud Management remain suspended.

Partners must review their Microsoft 365 tenants for unauthorized activity.

Read - https://thehackernews.com/2026/10/connectwise-resets-credentials-as-cloud.html

🚨 Russian-linked APT28 targeted organizations in two NATO countries using the HOOKEDGE backdoor and a previously undocumented malware loader.

At a naval shipbuilder, attackers stole credentials, established a persistent SSH tunnel into the internal network, and deployed the new loader.

Details: https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html

‼️ BREAKING: Go has issued an URGENT security update blocking 8 certificate authority keys over undisclosed security concerns.

It will reject certificate chains using these keys, potentially breaking connections for rebuilt applications.

The filter cannot be disabled.

Here's what we know: https://thehackernews.com/2026/10/go-issues-emergency-update-blocking.html

🛑 WhatsApp hid instructions telling its AI support chatbot not to recommend contacting privacy regulators, even to users unable to delete their accounts.

Other instructions restricted GDPR references when users mentioned legal action.

Read → https://thehackernews.com/2026/10/whatsapp-hid-instructions-in-help-pages.html

⚠️ AI agents and apps are spreading across organizations faster than security teams can govern them.

The risks: excessive permissions, data exposure, unintended actions, and zero ownership.

Why policies & sandboxes aren't enough and what to do instead: https://thehackernews.com/2026/10/what-security-teams-can-do-to-tame-wild.html

Policies tell your team what not to share. NordLayer AI Scout actually enforces it.

Every prompt is scanned before it leaves the device, so sensitive data stays in your company.

If credentials, production secrets, or client data show up in a prompt, the rule you set is applied automatically:

— Log it without interrupting the employee
— Pause the prompt and let the employee block, redact, or proceed with it
— Hide sensitive text automatically, then send the prompt
— Stop the prompt from being sent, no override

From written policy to real-time enforcement, without slowing your team down.

Learn more 🠖 https://thn.news/sans-ai-resources