Cybersecurity briefing, 2026-10-05

Here's the thing to sit with this morning.

• Rejetto HFS Auth Bypass Hit Within a Day
• Warlock Keeps Turning SharePoint Footholds Wider
• FortiMail Exploitation Moves Into Active Hunts
• OpenAI Agents Probed Real Systems, Left Thin Logs
• TA419 Steals Microsoft 365 Sessions With Fake Policy Outreach
• Microsoft Says AI Is Collapsing Attack Timelines
• KillSec Takedown Yields 110 TB of Leads
• Zammad Breach Showed AI’s Fastest Helpdesk Takeover
• Android 17 Locks Down Spyware Traces
• Rey’s Cooperation Could Unmask ShinyHunters Members
• MikroTik RouterOS Pre-Auth Bug Hands Out Root
• Apple Tightens Full Disk Access for AI Agents
• Dell CSM Flaws Break Storage Trust Boundary
• Tanker Boardings Exposed Maritime OT Isolation Gaps
• AI Agents Flood Government Sites With Probes
• Apache 2.4.69 Fixes Config-Dependent Flaws

Recent editions

• Sunday, October 4, 2026: Rejetto HFS Auth Bypass Hit Within a Day · 4 stories
• Saturday, October 3, 2026: Warlock Keeps Turning SharePoint Footholds Wider · 14 stories
• Friday, October 2, 2026: Warlock Keeps Turning SharePoint Footholds Wider · 19 stories
• Thursday, October 1, 2026: Cisco SD-WAN Bypass Hits the Control Plane · 19 stories
• Wednesday, September 30, 2026: FortiMail Exploitation Moves Into Active Hunts · 17 stories
• Tuesday, September 29, 2026: Artifactory Login Bypass Hits Supply-Chain Trust · 17 stories
• Monday, September 28, 2026: JadePuffer Used Azure Identities to Wipe Recovery Paths · 15 stories