Cybersecurity briefing, 2026-10-15

A breached Ivanti box isn't a VPN incident anymore.

• UAT-6275 mixes lures with public exploits
• Langflow flaw lets any account run server commands
• Danfoss controllers turned refrigeration into a remote switch
• Microsoft Patch Tuesday flags exploited Shell zero-day
• Microsoft’s takedown exposes the cloud-account scam layer
• DOJ raids expose North Korean laptop farms
• Anthropic shows cheap Android boxes can host AI models
• AhsayCBS flaws are being used as footholds
• GhostAction turns GitHub Actions into a secret trap
• ROMULUS turns ClickFix into reusable malware infrastructure
• UK government expands frontier AI security scanning
• Collabora built-in CODE flaw plants web shells
• D-Link DIR-868L PoC leaves EOL routers exposed
• Chrome exploit chain shrank to six days
• Adobe ships a broad patch wave across 10 products
• Wiz says scanner output needs runtime context
• Booz Allen test shows AI can outrun OT defenses
• Hirudo swaps bank apps for patched copies

Recent editions

• Wednesday, October 14, 2026: UAT-6275 mixes lures with public exploits · 17 stories
• Tuesday, October 13, 2026: Danfoss refrigeration flaws move from theory to spoilage · 17 stories
• Monday, October 12, 2026: Bricksforge upload flaw turns form files into PHP · 15 stories
• Sunday, October 11, 2026: FBIjobs probe names a ransomware-response executive · 2 stories
• Saturday, October 10, 2026: FBIjobs probe names a ransomware-response executive · 17 stories
• Friday, October 9, 2026: Fortinet FortiMail path traversal is actively exploited · 19 stories
• Thursday, October 8, 2026: PoeLLM turns exposed AI servers into scouts · 20 stories