{
  "schema_version": 2,
  "issue_date": "2026-10-19",
  "generated_at": "2026-10-19T09:24:52.793Z",
  "insight_context": {
    "schema_version": 2,
    "mode": "stale",
    "checked_at": "2026-10-19T09:24:51.338Z",
    "report_date": "2026-10-06",
    "manifest_generated_at": "2026-10-06T00:51:11Z",
    "report_url": "https://ricomanifesto.github.io/SentryInsight/"
  },
  "articles": [
    {
      "id": "reporting-d0d6e449ab45",
      "title": "Microsoft: October Windows Server updates break Exchange sign-in, mail flow",
      "link": "https://www.bleepingcomputer.com/news/microsoft/microsoft-october-windows-server-updates-cause-exchange-issues/",
      "date": "2026-10-19T08:58:41.000Z",
      "source": "Bleeping Computer",
      "summary": "Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems…",
      "firstSeen": "2026-10-19T09:24:51.854Z"
    },
    {
      "id": "reporting-13914d489178",
      "title": "Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers",
      "link": "https://thehackernews.com/2026/10/unpatched-broadcom-wi-fi-flaw-lets.html",
      "date": "2026-10-19T06:29:44.000Z",
      "source": "The Hacker News",
      "summary": "A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working against home gateways supplied by three Belgian internet providers, in one case reading the Wi-Fi password off the device…",
      "firstSeen": "2026-10-19T09:24:51.854Z"
    },
    {
      "id": "reporting-6dda7c5d535a",
      "title": "OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys",
      "link": "https://thehackernews.com/2026/10/opencode-console-breach-may-have.html",
      "date": "2026-10-19T06:07:08.000Z",
      "source": "The Hacker News",
      "summary": "An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key to call the provider so team members can use the models without…",
      "firstSeen": "2026-10-19T09:24:51.854Z"
    },
    {
      "id": "reporting-de332aa1deff",
      "title": "Hackers exploit SiteGuard WAF flaw to run commands as admins",
      "link": "https://www.bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/",
      "date": "2026-10-18T14:23:16.000Z",
      "source": "Bleeping Computer",
      "summary": "Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers…",
      "firstSeen": "2026-10-18T15:13:18.379Z"
    },
    {
      "id": "reporting-1a74dd4c9004",
      "title": "ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants",
      "link": "https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html",
      "date": "2026-10-18T08:23:02.000Z",
      "source": "The Hacker News",
      "summary": "ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise…",
      "firstSeen": "2026-10-18T09:15:32.735Z"
    },
    {
      "id": "reporting-622bd9511527",
      "title": "Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack",
      "link": "https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/",
      "date": "2026-10-17T15:18:51.000Z",
      "source": "Bleeping Computer",
      "summary": "ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants…",
      "firstSeen": "2026-10-17T18:16:42.430Z"
    },
    {
      "id": "reporting-978985bee2a5",
      "title": "Drupal patches critical RCE flaws, warns exploits may emerge soon",
      "link": "https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/",
      "date": "2026-10-17T14:32:48.000Z",
      "source": "Bleeping Computer",
      "summary": "Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system…",
      "firstSeen": "2026-10-17T15:12:56.350Z"
    },
    {
      "id": "reporting-219fd9eab491",
      "title": "MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon",
      "link": "https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html",
      "date": "2026-10-17T11:11:56.000Z",
      "source": "The Hacker News",
      "summary": "Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named \"imgdecode,\" was uploaded to the package registry on September 30, 2026, by a user named \"malfexteste8.\" It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of…",
      "firstSeen": "2026-10-17T12:20:29.643Z"
    },
    {
      "id": "reporting-614eb364146c",
      "title": "Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants",
      "link": "https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html",
      "date": "2026-10-17T06:16:46.000Z",
      "source": "The Hacker News",
      "summary": "Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs…",
      "firstSeen": "2026-10-17T09:15:13.217Z"
    },
    {
      "id": "reporting-92a3eccd55c6",
      "title": "BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs",
      "link": "https://www.darkreading.com/endpoint-security/beyondtrust-remote-support-exploited-edge-bugs",
      "date": "2026-10-16T20:34:37.000Z",
      "source": "Dark Reading",
      "summary": "Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.",
      "firstSeen": "2026-10-16T21:13:29.951Z"
    },
    {
      "id": "reporting-eef67d66b352",
      "title": "Critical BlockStrap flaw lets hackers run code on Magento servers",
      "link": "https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/",
      "date": "2026-10-16T20:00:59.000Z",
      "source": "Bleeping Computer",
      "summary": "Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers…",
      "firstSeen": "2026-10-16T21:13:29.951Z"
    },
    {
      "id": "reporting-3235ff50c52f",
      "title": "Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk",
      "link": "https://www.darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risk",
      "date": "2026-10-16T19:49:30.000Z",
      "source": "Dark Reading",
      "summary": "Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.",
      "firstSeen": "2026-10-16T21:13:29.951Z"
    },
    {
      "id": "reporting-20c2685a8d27",
      "title": "Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform",
      "link": "https://www.darkreading.com/data-privacy/biomemory-launches-dna-shield",
      "date": "2026-10-16T19:22:12.000Z",
      "source": "Dark Reading",
      "summary": "The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.",
      "firstSeen": "2026-10-16T21:13:29.951Z"
    },
    {
      "id": "reporting-269403f1cccc",
      "title": "Enterprise AI Enters Risk Management Phase as Security Concerns Rise",
      "link": "https://www.darkreading.com/cyber-risk/enterprise-ai-risk-management-phase-security-concerns-rise",
      "date": "2026-10-16T19:13:59.000Z",
      "source": "Dark Reading",
      "summary": "Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.",
      "firstSeen": "2026-10-16T21:13:29.951Z"
    },
    {
      "id": "reporting-c679d74c8a48",
      "title": "AI Takes Control of Robotic Arm in 16 Minutes Flat",
      "link": "https://www.darkreading.com/ics-ot-security/ai-takes-control-robotic-arm-16-minutes",
      "date": "2026-10-16T18:37:50.000Z",
      "source": "Dark Reading",
      "summary": "Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.",
      "firstSeen": "2026-10-16T21:13:29.951Z"
    },
    {
      "id": "reporting-ebaf37949a88",
      "title": "Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug",
      "link": "https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html",
      "date": "2026-10-16T17:48:45.000Z",
      "source": "The Hacker News",
      "summary": "A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections.Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped…",
      "firstSeen": "2026-10-16T21:13:29.951Z"
    },
    {
      "id": "reporting-f10c7fe58461",
      "title": "Targeted ads installed Candiru spyware in zero-click attacks",
      "link": "https://www.bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware/",
      "date": "2026-10-16T17:20:03.000Z",
      "source": "Bleeping Computer",
      "summary": "Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device…",
      "firstSeen": "2026-10-16T18:18:40.380Z"
    },
    {
      "id": "reporting-ffdcabb15288",
      "title": "Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor",
      "link": "https://thehackernews.com/2026/10/attackers-tampered-with-aomei.html",
      "date": "2026-10-16T16:43:39.000Z",
      "source": "The Hacker News",
      "summary": "Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor. Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis…",
      "firstSeen": "2026-10-16T18:18:40.380Z"
    },
    {
      "id": "reporting-23e4826e2b12",
      "title": "UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing",
      "link": "https://thehackernews.com/2026/10/uat-11985-uses-fake-event-invites-to.html",
      "date": "2026-10-16T16:16:44.000Z",
      "source": "The Hacker News",
      "summary": "Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google account credentials and multi-factor authentication (MFA) codes. The activity is being tracked by…",
      "firstSeen": "2026-10-16T18:18:40.380Z"
    },
    {
      "id": "reporting-6670b2a8bcc8",
      "title": "OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract",
      "link": "https://thehackernews.com/2026/10/openai-research-model-spent-3rd-party.html",
      "date": "2026-10-16T14:03:04.000Z",
      "source": "The Hacker News",
      "summary": "OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, spent test cryptocurrency from a third-party's wallet without authorization to complete a coding task. The incident, the AI company said, involved an internal research model part…",
      "firstSeen": "2026-10-16T18:18:40.380Z"
    },
    {
      "id": "reporting-dfbbec485291",
      "title": "When Your Ransomware Negotiator Works for the Other Side",
      "link": "https://www.darkreading.com/cyber-risk/when-your-ransomware-negotiator-works-other-side",
      "date": "2026-10-16T14:00:00.000Z",
      "source": "Dark Reading",
      "summary": "The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-399499812641",
      "title": "Employees using personal ChatGPT at work? Here's what IT admins need to do",
      "link": "https://www.bleepingcomputer.com/news/security/employees-using-personal-chatgpt-at-work-heres-what-it-admins-need-to-do/",
      "date": "2026-10-16T13:50:59.000Z",
      "source": "Bleeping Computer",
      "summary": "Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can investigate unauthorized AI use and block sensitive information before it reaches personal accounts…",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-b88556328887",
      "title": "When AI Agents Commit Breaches, Humans May Not Be Held Liable",
      "link": "https://www.darkreading.com/insider-threats/ai-agents-breaches-humans-liable",
      "date": "2026-10-16T13:00:00.000Z",
      "source": "Dark Reading",
      "summary": "As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-27c670c5958b",
      "title": "Burger King Japan data breach exposes 11 million customer records",
      "link": "https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/",
      "date": "2026-10-16T12:01:29.000Z",
      "source": "Bleeping Computer",
      "summary": "Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records…",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-3f11a9ccfb4f",
      "title": "AI Decision Models and Their Impact on AI SOC Platforms",
      "link": "https://thehackernews.com/2026/10/ai-decision-models-and-their-impact-on.html",
      "date": "2026-10-16T11:30:00.000Z",
      "source": "The Hacker News",
      "summary": "In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cribl published cribl-decision, an open LoRA adapter you can run locally. Others, like Laya, are…",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-2afcc8d3814b",
      "title": "Microsoft: October Windows update may break Smart App Control",
      "link": "https://www.bleepingcomputer.com/news/microsoft/kb5127648-windows-security-update-may-break-smart-app-control/",
      "date": "2026-10-16T08:44:22.000Z",
      "source": "Bleeping Computer",
      "summary": "Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update…",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-d1065e845858",
      "title": "BAE Systems cyberattack disrupts US federal court operations",
      "link": "https://www.bleepingcomputer.com/news/security/bae-systems-cyberattack-disrupts-us-federal-court-operations/",
      "date": "2026-10-16T07:37:35.000Z",
      "source": "Bleeping Computer",
      "summary": "The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts…",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-2f4ebff472d5",
      "title": "China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers",
      "link": "https://thehackernews.com/2026/10/china-linked-hackers-exploited.html",
      "date": "2026-10-16T06:55:55.000Z",
      "source": "The Hacker News",
      "summary": "The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a…",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-9e713cfb0ab3",
      "title": "CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing",
      "link": "https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html",
      "date": "2026-10-16T06:53:09.000Z",
      "source": "The Hacker News",
      "summary": "AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations detected the unauthorized access. After internal reviews, the AI companies whose models were being tested…",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-166fdf646185",
      "title": "BeyondTrust patches zero-day exploited in attacks since August",
      "link": "https://www.bleepingcomputer.com/news/security/beyondtrust-patches-zero-day-exploited-in-attacks-since-august/",
      "date": "2026-10-16T06:18:08.000Z",
      "source": "Bleeping Computer",
      "summary": "BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August…",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-a2dfa0394e06",
      "title": "PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions",
      "link": "https://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.html",
      "date": "2026-10-16T04:59:36.000Z",
      "source": "The Hacker News",
      "summary": "A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a…",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-0b81da600f20",
      "title": "SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape",
      "link": "https://www.darkreading.com/cybersecurity-operations/sector-2026-reveals-a-rapidly-shifting-cybersecurity-landscape",
      "date": "2026-10-15T22:10:08.000Z",
      "source": "Dark Reading",
      "summary": "The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    },
    {
      "id": "reporting-967cf749e438",
      "title": "F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud",
      "link": "https://www.darkreading.com/threat-intelligence/f-secure-launches-victim-first-scam-encyclopedia-covering-50-types-of-consumer-fraud",
      "date": "2026-10-15T21:55:07.000Z",
      "source": "Dark Reading",
      "summary": "Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.",
      "firstSeen": "2026-10-16T15:14:38.065Z"
    }
  ]
}