Cyber Threat Intel Daily Briefing — 2026-10-12

CYBER THREAT INTEL

DAILY BRIEFING · 2026-10-12 12:15 UTC · REPORT BRIEF-20261012-121511

OPEN // LE

01

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forg

SRC: The Hacker News Mon, 12 Oct 2026 16:06:56 +0530 https://thehackernews.com/2026/10/critical-sonicwall-sma-1000-flaw.html

02

Your AI agent is only as safe as the packages it downloads

NVIDIA's new agent safety platform puts enforcement in the right place. It still must know what it is letting through. The post Your AI agent is only as safe as the packages it downloads appeared first on CyberScoop.

SRC: CyberScoop Mon, 12 Oct 2026 10:00:00 +0000 https://cyberscoop.com/ai-agent-software-supply-chain-security-op-ed/

03

CyberXero Used 51 AI Agents to Steal 628,000 Ukrainian Records

CyberXero used 51 AI agents to support cyberattacks, stealing 628,000 Ukrainian records, including sensitive data from energy infrastructure. CyberXero is an operation that combines traditional hacking tools with AI agents to carry out cyberattacks. According to SOCRadar researchers, the attackers u

SRC: Security Affairs Mon, 12 Oct 2026 09:34:35 +0000 https://securityaffairs.com/200803/cyber-crime/cyberxero-used-51-ai-agents-to-steal-628000-ukrainian-records.html

04

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrar

SRC: The Hacker News Mon, 12 Oct 2026 14:32:14 +0530 https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html

05

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference. The post Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe appeared first on SecurityWeek.

SRC: SecurityWeek Mon, 12 Oct 2026 10:32:05 +0000 https://www.securityweek.com/ransomware-response-expert-arrested-in-shinyhunters-fbi-hack-probe/

06

Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Anthropic Restricts Live Internet Access After Claude

SRC: Security Affairs Sun, 11 Oct 2026 13:34:01 +0000 https://securityaffairs.com/200752/breaking-news/security-affairs-newsletter-round-599-by-pierluigi-paganini-international-edition.html

07

iRhythm Data Breach Impacts at Least 360,000 People

Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers. The post iRhythm Data Breach Impacts at Least 360,000 People appeared first on SecurityWeek.

SRC: SecurityWeek Mon, 12 Oct 2026 11:05:43 +0000 https://www.securityweek.com/irhythm-data-breach-impacts-over-360000-people/

08

GTA 6 Leaker Demands $30M Meme Coin Market Cap to Release Full Game

CyberLeek threatens to leak a playable GTA 6 build if its Solana meme coin hits a $30 million market cap, but the build remains unverified. CyberLeek, the anonymous figure behind this summer’s wave of GTA 6 leaks, just raised the stakes considerably. After dropping 25 minutes of gameplay footage ear

SRC: Security Affairs Mon, 12 Oct 2026 05:43:37 +0000 https://securityaffairs.com/200780/cyber-crime/gta-6-leaker-demands-30m-meme-coin-market-cap-to-release-full-game.html

09

Nippon Columbia malware incident exposes 8.6 million karaoke fan records

Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records. […]

SRC: BleepingComputer Sun, 11 Oct 2026 10:23:46 -0400 https://www.bleepingcomputer.com/news/security/nippon-columbia-malware-incident-exposes-86-million-karaoke-fan-records/

10

Microsoft: Windows 11 23H2 reaches end of support in 30 days

Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop receiving security updates next month. […]

SRC: BleepingComputer Mon, 12 Oct 2026 07:58:33 -0400 https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-23h2-reaches-end-of-support-in-30-days/

11

Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US

Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside the US. The post Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US appeared first on SecurityWeek.

SRC: SecurityWeek Mon, 12 Oct 2026 11:24:50 +0000 https://www.securityweek.com/mastermind-of-15000-mule-cybercrime-laundering-network-pleads-guilty-in-us/

12

Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch

Beginning February 2027, all newly issued certificates will have a 64-day validity period by default. The post Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch appeared first on SecurityWeek.

SRC: SecurityWeek Mon, 12 Oct 2026 07:53:28 +0000 https://www.securityweek.com/lets-encrypt-cuts-default-certificate-validity-to-64-days-ahead-of-45-day-switch/

13

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 3

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can aut

SRC: Security Affairs Sun, 11 Oct 2026 18:43:54 +0000 https://securityaffairs.com/200794/ai/security-affairs-ai-cybersecurity-newsletter-round-3.html

[ SOURCE ] OpenPhish (18 indicator(s))