Cybersecurity briefing, 2026-10-14

Going token-less didn't make package publishing safer.

• Ivanti fixes seven flaws as Connect Secure is exploited
• Microsoft Patch Tuesday flags exploited Shell zero-day
• Danfoss refrigeration flaws move from theory to spoilage
• DOJ arrests confirm North Korean laptop farms
• Ledger implant in reseller-sold wallets drained millions
• Hirudo swaps bank apps for patched copies
• Reflectiz AI agent proves OTP login bypass
• npm Trusted Publishing trusted the wrong identity
• BO Team keeps SkyNet under multi-day DDoS
• Linux vhost flaw crosses from local root to guest escape
• Anthropic shows cheap Android boxes can host AI models
• UK government expands frontier AI security scanning
• NCSC flags multiple Azure control-plane flaws
• Yandex loses redundancy as third data center is hit
• OpenAI case spotlights room-level insider surveillance
• Semperis survey flags ransomware threats beyond data theft
• Package managers leave repository tampering too much trust
• Kimsuky hides wartime espionage in ordinary outreach

Recent editions

• Tuesday, October 13, 2026: Danfoss refrigeration flaws move from theory to spoilage · 17 stories
• Monday, October 12, 2026: Bricksforge upload flaw turns form files into PHP · 16 stories
• Sunday, October 11, 2026: FBIjobs probe names a ransomware-response executive · 3 stories
• Saturday, October 10, 2026: FBIjobs probe names a ransomware-response executive · 17 stories
• Friday, October 9, 2026: Fortinet FortiMail path traversal is actively exploited · 19 stories
• Thursday, October 8, 2026: PoeLLM turns exposed AI servers into scouts · 20 stories
• Wednesday, October 7, 2026: PoeLLM turns exposed AI servers into scouts · 20 stories