Update Windows: Record Patch Tuesday fixes flaw already under attack
Microsoft’s October updates address a record 1,413 vulnerabilities, including a Windows flaw attackers are already exploiting and two other zero-days.
Search Intelligence
The 2026 Infostealer Index: How 34 Threat Intelligence Vendors Stack Up
The 2026 Infostealer Index: A Comprehensive Vendor Ranking The 2026 Infostealer Index An independent, deep-dive analysis of Hudson Rock’s benchmark threat intelligence evaluations. Ranking 34 ve
Fake Calendly “Meta Careers” pages steal Facebook and Google logins
An interview invitation becomes a trap for your Facebook and Google passwords, even with two-factor authentication turned on.
Package managers have an integrity problem
I tested 25 of the most popular package managers to check whether they detect a compromised package repository injecting malicious code into legitimate packages. This code integrity problem could be s
Hudson Rock Partners with TRM Labs as a Launch Data Partner for Ardence, the New AI Investigation Platform
Partnership Announcement October 14, 2026 · Cybercrime Intelligence Hudson Rock Partners with TRM Labs as a Launch Data Partner for Ardence, the New AI Investigation Platform Bridging the... The
ISC Stormcast For Wednesday, October 14th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Part 2 – Cybersecurity journeys: What even is this job?
If you’ve ever looked at a list of cybersecurity jobs and felt like none of them fit you, you might just be looking at a short list. Most career guides cover the same few roles, like the analyst watch
The Enterprise Threat Intelligence Report: 2026
New research examines the challenges shaping enterprise threat intelligence programs, what teams are prioritizing for the months ahead, and how they are approaching agentic AI plans and budgets. The p
Hackers heat up supermarket fridges, spoiling food across France
A cyberattack on supermarket temperature-control systems in France left spoiled food, empty shelves, and reports of fires.
Your “Who’s this?” reply is exactly what text scammers want
Every reply tells scammers your number is active, which makes it worth more on the dark web and a better target for fraud.
ISC Stormcast For Tuesday, October 13th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM
You want to set a cryptographic algorithm policy and stop non-compliant choices from being made in your Amazon Web Services (AWS) environment. This post shows you how. As you adopt post-quantum crypto
FBI Arrests Suspect in FBI-Hacking Case
In September, hackers from a group called ShinyHunters announced that they stole a trove of FBI data about its own agents. It was an intelligence disaster . Last week, the FBI arrested (alternate link
12th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 12th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Denmark’s government has disclosed a breach
How “123456” became the key to almost 9 million personal records
A series of security failures, including a very weak password, exposed almost 9 million people’s personal information.
A week in security (October 5 – October 11)
A list of topics we covered in the week of October 5 to October 11 of 2026
ISC Stormcast For Monday, October 12th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
ASOS breach update: Hackers stole customer details and shopping searches
Stolen ASOS data includes shopping searches as well as personal details, so customers should watch out for convincing phishing messages.
ISC Stormcast For Friday, October 9th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Reconstructing AI Agent Activity: Two New Scripts for Forensic Review
We just did a major update to FOR577 and added a lot of new material on day 5 about investigating AI usage in incident response. In the new material we dicsuss 8&#;x26;#;xc2