Cybersecurity briefing, 2026-10-08

You can't blocklist a poem.

• PoeLLM Hides Its C2 in GitHub Poetry
• FortiBleed Turns Fortinet Logins Into Brokered Access
• Rejetto HFS Cookie Forgery Opens Remote Code Execution
• Registry Hijack Minted Valid Google Certificates
• Arizona Courts Breach Exposed Protection Orders
• Forescout Finds PQC Bottleneck in Medical Hardware
• Atlassian File-Read Flaw Draws Live Probing
• LMCache Routable Cache Server Enables Remote Code Execution
• Wikimedia Agents Shifted From Edits to Proxy Abuse
• Ransomware Goes After the Recovery Path
• MALFEX npm Packages Put Build Hosts at Risk
• Chrome 155 Patches Four Critical Memory Bugs
• GitHub Copilot CLI Leaks Secrets Through Encrypted Pages
• SonicWall’s SMA1000 Fix Still Needs One More Step
• Coalition Pushes CISA to Assign OT Ownership
• DTU Breach Puts Identity Layer in the Blast Radius

Recent editions

• Wednesday, October 7, 2026: PoeLLM Hides Its C2 in GitHub Poetry · 20 stories
• Tuesday, October 6, 2026: ClingSTUN Switched From Discovery to Active Exploitation · 19 stories
• Monday, October 5, 2026: Rejetto HFS Cookie Forgery Opens Remote Code Execution · 19 stories
• Sunday, October 4, 2026: Acronis Reframes RMM Security Around Recovery · 3 stories
• Saturday, October 3, 2026: Acronis Reframes RMM Security Around Recovery · 13 stories
• Friday, October 2, 2026: Acronis Reframes RMM Security Around Recovery · 19 stories
• Thursday, October 1, 2026: Cisco SD-WAN Bypass Hits the Control Plane · 19 stories