{ "schema_version": 3, "report_contract_version": 5, "report_plan": { "control_implications": [ { "control_id": "vulnerability_management", "evidence_excerpt": "Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers…", "evidence_origin": "summary", "focus": "Magento and Adobe Commerce", "priority": "high", "source_ids": [ 1 ] }, { "control_id": "vulnerability_management", "evidence_excerpt": "The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a…", "evidence_origin": "summary", "focus": "BeyondTrust Remote Support", "priority": "high", "source_ids": [ 2 ] }, { "control_id": "vulnerability_management", "evidence_excerpt": "A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a…", "evidence_origin": "summary", "focus": "Fortinet FortiOS", "priority": "medium", "source_ids": [ 3 ] }, { "control_id": "third_party_risk", "evidence_excerpt": "ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise…", "evidence_origin": "summary", "focus": "ConnectWise Cloud Backup", "priority": "high", "source_ids": [ 4 ] }, { "control_id": "third_party_risk", "evidence_excerpt": "Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named \"imgdecode,\" was uploaded to the package registry on September 30, 2026, by a user named \"malfexteste8.\" It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of…", "evidence_origin": "summary", "focus": "malicious npm package", "priority": "medium", "source_ids": [ 7 ] }, { "control_id": "change_management", "evidence_excerpt": "Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system…", "evidence_origin": "summary", "focus": "patched two critical vulnerabilities", "priority": "medium", "source_ids": [ 6 ] } ], "executive_brief": { "decision_frame": "separate", "source_ids": [ 1, 4, 6 ] }, "industry_impacts": [], "regulatory_changes": [] }, "generated_at": "2026-10-18T13:03:49.19359Z", "feed_url": "https://ricomanifesto.github.io/SentryDigest/feed.xml", "feed_home_url": "https://ricomanifesto.github.io/SentryDigest/", "digest_issue_date": "2026-10-18", "digest_issue_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/", "requested_model": "openrouter/nvidia/nemotron-3-ultra-550b-a55b:free", "resolved_model": "nvidia/nemotron-3-ultra-550b-a55b:free", "sources": [ { "title": "Critical BlockStrap flaw lets hackers run code on Magento servers", "url": "https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-eef67d66b352", "cves": [ "CVE-2026-103849" ], "snippet": "Critical BlockStrap flaw lets hackers run code on Magento servers Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers… Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers…", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers…", "text": "Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers…" }, { "extraction_version": 1, "origin": "content", "raw_text": "Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers…", "text": "Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers…" } ], "effective_date_evidence": null }, { "title": "China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers", "url": "https://thehackernews.com/2026/10/china-linked-hackers-exploited.html", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-2f4ebff472d5", "cves": [ "CVE-2026-102764" ], "snippet": "China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a… The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 20", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a…", "text": "The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a…" }, { "extraction_version": 1, "origin": "content", "raw_text": "The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a…", "text": "The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a…" } ], "effective_date_evidence": null }, { "title": "PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions", "url": "https://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.html", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-a2dfa0394e06", "cves": [ "CVE-2025-61624" ], "snippet": "PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a… A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of C", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a…", "text": "A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a…" }, { "extraction_version": 1, "origin": "content", "raw_text": "A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a…", "text": "A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a…" } ], "effective_date_evidence": null }, { "title": "ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants", "url": "https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-1a74dd4c9004", "cves": [], "snippet": "ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise… ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and ", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise…", "text": "ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise…" }, { "extraction_version": 1, "origin": "content", "raw_text": "ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise…", "text": "ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise…" } ], "effective_date_evidence": null }, { "title": "Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack", "url": "https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-622bd9511527", "cves": [], "snippet": "Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants… ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants…", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants…", "text": "ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants…" }, { "extraction_version": 1, "origin": "content", "raw_text": "ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants…", "text": "ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants…" } ], "effective_date_evidence": null }, { "title": "Drupal patches critical RCE flaws, warns exploits may emerge soon", "url": "https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-978985bee2a5", "cves": [], "snippet": "Drupal patches critical RCE flaws, warns exploits may emerge soon Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system… Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system…", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system…", "text": "Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system…" }, { "extraction_version": 1, "origin": "content", "raw_text": "Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system…", "text": "Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system…" } ], "effective_date_evidence": null }, { "title": "MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon", "url": "https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-219fd9eab491", "cves": [], "snippet": "MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named \"imgdecode,\" was uploaded to the package registry on September 30, 2026, by a user named \"malfexteste8.\" It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of… Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named \"imgdecode,\" was uploaded to the package registry on S", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named \"imgdecode,\" was uploaded to the package registry on September 30, 2026, by a user named \"malfexteste8.\" It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of…", "text": "Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named \"imgdecode,\" was uploaded to the package registry on September 30, 2026, by a user named \"malfexteste8.\" It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of…" }, { "extraction_version": 1, "origin": "content", "raw_text": "Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named \"imgdecode,\" was uploaded to the package registry on September 30, 2026, by a user named \"malfexteste8.\" It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of…", "text": "Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named \"imgdecode,\" was uploaded to the package registry on September 30, 2026, by a user named \"malfexteste8.\" It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of…" } ], "effective_date_evidence": null }, { "title": "Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants", "url": "https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-614eb364146c", "cves": [], "snippet": "Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs… Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerl", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs…", "text": "Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs…" }, { "extraction_version": 1, "origin": "content", "raw_text": "Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs…", "text": "Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs…" } ], "effective_date_evidence": null }, { "title": "BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs", "url": "https://www.darkreading.com/endpoint-security/beyondtrust-remote-support-exploited-edge-bugs", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-92a3eccd55c6", "cves": [], "snippet": "BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group. Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.", "text": "Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group." }, { "extraction_version": 1, "origin": "content", "raw_text": "Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.", "text": "Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group." } ], "effective_date_evidence": null }, { "title": "Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk", "url": "https://www.darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risk", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-3235ff50c52f", "cves": [], "snippet": "Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees. Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.", "text": "Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees." }, { "extraction_version": 1, "origin": "content", "raw_text": "Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.", "text": "Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees." } ], "effective_date_evidence": null }, { "title": "Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform", "url": "https://www.darkreading.com/data-privacy/biomemory-launches-dna-shield", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-20c2685a8d27", "cves": [], "snippet": "Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year. The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.", "text": "The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year." }, { "extraction_version": 1, "origin": "content", "raw_text": "The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.", "text": "The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year." } ], "effective_date_evidence": null }, { "title": "Enterprise AI Enters Risk Management Phase as Security Concerns Rise", "url": "https://www.darkreading.com/cyber-risk/enterprise-ai-risk-management-phase-security-concerns-rise", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-18/#reporting-269403f1cccc", "cves": [], "snippet": "Enterprise AI Enters Risk Management Phase as Security Concerns Rise Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution. Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.", "text": "Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution." }, { "extraction_version": 1, "origin": "content", "raw_text": "Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.", "text": "Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution." } ], "effective_date_evidence": null } ] }