Posts of last few hours

Australian Gov't Weighs Mandatory AI Incident Reporting
In the wake of an agentic attack against its own Medicare systems, Australia's government is feeling out what regulations might look like for frontier AI companies.
https://www.darkreading.com/cybersecurity-operations/australian-govt-ai-incident-reporting
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]
https://www.bleepingcomputer.com/news/security/fbi-ongoing-fortibleed-attacks-lock-out-fortigate-vpn-admins/
Citizen Lab Slams Trump Administration, 'Techno-Fascist' Executives
The Citizen Lab's Ron Deibert warns the US government is pushing for pervasive surveillance and says certain technology executives are all too happy to help.
https://www.darkreading.com/cyber-risk/citizen-lab-slams-trump-administration-techno-fascist-executives
Anthropic Gives Vetted Defenders Fewer Claude Guardrails
Anthropic has merged Project Glasswing into a tiered access program for its advanced cyber LLMs, including Opus, Sonnet, and Mythos.
https://www.darkreading.com/vulnerabilities-threats/anthropic-vetted-defenders-claude-guardrails
Hackers hijack Google domains after breaching ccTLD registries
Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone after compromising third-party operators and modifying authoritative DNS records. [...]
https://www.bleepingcomputer.com/news/security/hackers-hijack-google-domains-after-breaching-cctld-registries/
Election Threat 2026: 10 Key Takeaways from the EI-ISAC Election Security Forum
More than 700 election security stakeholders joined the EI-ISAC Election Threat 2026 forum to strengthen coordination, preparedness, and resilience ahead of future elections.
https://www.cisecurity.org/insights/blog/election-threat-2026-10-key-takeaways
После банков в Южной Корее атаковали две мегацеркви, в логах появились «субагенты»
Следы необычной автоматизации обнаружились рядом с огромными массивами персональной информации.
https://www.securitylab.ru/news/578392.php
US posts $10 million reward for accused Chinese ‘Hafnium’ hacker
U.S. officials say Zhang Yu was a prominent figure in the Hafnium campaign, which saw hackers breach thousands of computers and steal troves of documents.
https://therecord.media/accused-hafnium-hacker-zhang-yu-10million-reward
Major rules for federal contractors handling sensitive data are nearing the finish line

The regulations on “controlled unclassified information” include security rules and requirements for reporting when they’re breached, including by cyberattacks.

The post Major rules for federal contractors handling sensitive data are nearing the finish line appeared first on CyberScoop.

https://cyberscoop.com/federal-contractors-cui-cybersecurity-rules/
OpenAI Agent Escape Causes Wikimedia Service Outage
Autonomous agents also tried to abuse other websites and services hosted by the foundation, using them as proxies for unauthorized activities.
https://www.darkreading.com/cyberattacks-data-breaches/openai-agent-escape-causes-wikimedia-service-outage
Теперь у магнетизма есть кнопка ON/OFF. Физики научились переключать его электричеством
Протоны меняют расположение атомов кислорода и перестраивают работу тонкой оксидной плёнки.
https://www.securitylab.ru/news/578456.php
МВД требует коды доступа к Telegram
Восемь лет назад похожий спор закончился объяснением, почему выполнить требование технически невозможно.
https://www.securitylab.ru/news/578438.php
Why API Security Belongs in ECB Cyber Action Plans
Discover how securing shadow and zombie APIs helps banks meet the ECB cyber action plan mandates, improve posture, and mitigate AI-enabled threats.
https://www.akamai.com/blog/ai/2026/oct/why-api-security-belongs-ecb-cyber-action-plans
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google's own systems were not breached, but any domain ending in .gh (Ghana), .sl (Sierra Leone) or .as (American Samoa) was put at risk. With such a certificate, an attacker could pose as the real site over an encrypted
https://thehackernews.com/2026/10/attackers-hijack-gh-sl-and-as.html
wolfSSL security advisory (AV26-1016)
https://cyber.gc.ca/en/alerts-advisories/wolfssl-security-advisory-av26-1016
$11 million plan for psychological support at Cyber Command gets fresh boost from lawmakers
Lawmakers who oversee military cyber policy as well as the Fort Meade, Maryland, hub for those agencies say an $11 million mental health program should be locked in to defense spending legislation.
https://therecord.media/cyber-command-mental-health-support-program-bipartisan-letters
Пентагон отправляет четыре лазерно-микроволновые системы на реальные базы
Годовой тест покажет, выдержит ли новое оружие обычную военную эксплуатацию.
https://www.securitylab.ru/news/578436.php
Arizona courts say hackers stole info on more than 1.3 million people
The investigation into the incident revealed cybercriminals were able to breach the Fines/Fees and Restitution Enforcement (FARE) Program, a statewide program that helps the court collect outstanding debts tied to traffic and criminal violations.
https://therecord.media/arizona-courts-say-hackers-stole-info-on-over-1-million
Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys (Updated)
Dread dark web forum appears hijacked after a pinned post claimed control of the project and domain keys, while denying plans to leak user data.
https://hackread.com/dread-dark-web-forum-hijacked-domain-keys/
Arista Networks security advisory (AV26-1015)
https://cyber.gc.ca/en/alerts-advisories/arista-networks-security-advisory-av26-1015

Managed ad