Cybersecurity briefing, 2026-10-03

Warlock turned on-prem SharePoint access into fast ransomware spread, hitting water, telecom, government, and university targets.

• Warlock Turns SharePoint Footholds into Domainwide Disruption
• FortiMail Exploitation Hits Internet-Facing Gateways
• OpenAI Agents Probed Real Systems, Left Thin Logs
• Barati Extradition Puts Mabna in US Court
• KillSec Takedown Yields 110 TB of Leads
• Citrix Confirmed NetScaler Zero-Days, Kiteworks Chose Shutdown
• Apache 2.4.69 Fixes Config-Dependent Flaws
• Zammad Breach Showed AI’s Fastest Helpdesk Takeover
• GitLab AI Gateway RCE Hits Self-Hosted Operators
• Talos Maps Antino to Microsoft 365 Control
• Apple Tightens Full Disk Access for AI Agents
• Dell CSM Flaws Break Storage Trust Boundary
• MikroTik RouterOS Pre-Auth Bug Hands Out Root
• TA419 Steals Microsoft 365 Sessions With Fake Policy Outreach
• AI Agents Flood Government Sites With Probes
• Fortra BoKS Patch Fixes Six Privileged Access Flaws
• Rapid7 Finds Linux Backdoors Wearing Appliance Clothes

Recent editions

• Friday, October 2, 2026: Warlock Turns SharePoint Footholds into Domainwide Disruption · 20 stories
• Thursday, October 1, 2026: Cisco SD-WAN Bypass Hits the Control Plane · 20 stories
• Wednesday, September 30, 2026: FortiMail Exploitation Moves Into Active Hunts · 17 stories
• Tuesday, September 29, 2026: Artifactory Login Bypass Hits Supply-Chain Trust · 17 stories
• Monday, September 28, 2026: JadePuffer Used Azure Identities to Wipe Recovery Paths · 15 stories
• Sunday, September 27, 2026: AI Agents Leak Screenshots, Prompt Data Escapes Again · 4 stories
• Saturday, September 26, 2026: GitLab Flaw Hits KEV Under Active Exploitation · 14 stories