BMC Daily Cyber News

1:31

Retail breach turns customer alerts into a public...

BMC Daily Cyber News ·

2026/10/07

Daily Cyber News: Retail breach turns customer alerts into a public pressure channel Customer trust took an immediate hit when attackers sent an unauthorized notification through the ASOS mobile app. ASOS confirmed unauthorized access involving third-party platforms used to communicate with customers, and it said names and contact details may have been exposed. At this stage, the retailer doesn’t believe payment-card information or account passwords were affected. Key context: The practical

en

1:26

Exchange bug could expose coworkers’ email and...

BMC Daily Cyber News ·

2026/10/06

Daily Cyber News: Exchange bug could expose coworkers’ email and attachments An authenticated attacker could read other users’ emails and attachments because of a high-severity authorization weakness in Exchange Server. The access is limited to people in the same organization and does not cross tenant boundaries. Key context: Microsoft has released an out-of-band update for supported on-premises Exchange versions. Additional detail: Mailbox access can reveal confidential conversations,

en

1:28

Hijacked IoT devices become hidden proxies inside...

BMC Daily Cyber News ·

2026/10/06

Daily Cyber News: Hijacked IoT devices become hidden proxies inside enterprise networks Compromised routers, surveillance equipment, and industrial devices are being turned into hidden proxy nodes inside enterprise networks. The ClingSTUN Linux malware targets at least 24 known weaknesses to gain initial access. It also carries exploits for seven more weaknesses that can help it spread to other vulnerable devices. Key context: ClingSTUN uses legitimate public STUN servers to learn how an

en

1:42

Bank breaches expose customer data as South Korea...

BMC Daily Cyber News ·

2026/10/06

Daily Cyber News: Bank breaches expose customer data as South Korea investigates South Korean authorities are investigating customer data exposure across several major financial institutions. Officials confirmed a breach at Shinhan Bank and other incidents involving Kookmin Bank. Hana Bank also reported a limited compromise of a sales-support system. Key context: Authorities have launched on-site investigations and told financial companies to strengthen monitoring and incident

en

1:29

AI-led helpdesk breach reaches root access within...

BMC Daily Cyber News ·

2026/10/06

Daily Cyber News: AI-led helpdesk breach reaches root access within secondsAn intruder gained full control of a helpdesk server within seconds after an AI agent chained two previously unknown Zammad weaknesses. The September 21st attack hijacked a session, executed code as the Zammad service account, and then escalated to root at the Dutch Institute for Vulnerability Disclosure. Key context: The intrusion was detected the next day, and access to systems in the data center was

en

1:27

National registry breach exposes data tied to 8.8...

BMC Daily Cyber News ·

2026/10/06

Daily Cyber News: National registry breach exposes data tied to 8.8 million people Denmark’s national population registry has exposed personal information tied to approximately 8.8 million people. Attackers misused a private company’s legitimate access to obtain names, addresses, CPR identification numbers, and other information. The incident happened in September and was discovered on October 2nd. Key context: The affected records cover current residents, people who moved abroad, and

en

1:46

Malicious Custom GPTs steer users into remote access...

BMC Daily Cyber News ·

2026/10/05

Daily Cyber News: Malicious Custom GPTs steer users into remote access malwareUsers searching for AI services can be manipulated into installing remote access malware themselves. In this campaign, attackers used sponsored search results, a malicious Custom GPT, a fake service notice, and a counterfeit CAPTCHA. Victims were then instructed to paste an obfuscated PowerShell command. Key context: The attack borrows trust from familiar AI and CAPTCHA experiences while shifting the final

en

1:33

AI coding agents exposed 13,000 internal screenshots...

BMC Daily Cyber News ·

2026/10/05

Daily Cyber News: AI coding agents exposed 13,000 internal screenshots on GitHub Credentials, customer records, internal dashboards, financial interfaces, and unreleased features appeared in more than thirteen thousand publicly accessible screenshots. The images came from over 300 organizations and were found across more than 900 public GitHub repositories. Coding agents reportedly created public repositories or used public release assets while handling visual evidence for private pull

en

1:56

Pentagon breach exposes long-lived identity data for...

BMC Daily Cyber News ·

2026/10/05

Daily Cyber News: Pentagon breach exposes long-lived identity data for millions Millions of people face continuing identity and impersonation risk after unauthorized users accessed a Defense Manpower Data Center system. The incident affected 2.76 million living people and approximately two hundred ninety four thousand deceased individuals. Access reportedly continued from October 2025 until July 2026 through a file-sharing weakness. Key context: The Pentagon has reported no evidence that

en

1:35

Old SharePoint gaps still expose critical services to...

BMC Daily Cyber News ·

2026/10/05

Daily Cyber News: Old SharePoint gaps still expose critical services to ransomware Water, telecom, government, and university organizations remain exposed to ransomware through SharePoint weaknesses disclosed more than a year ago. Warlock operators recently hit at least four organizations across Europe, Africa, and Latin America. They used unpatched SharePoint servers to get inside and then expanded through the Windows domain. Key context: The operation shows how an old internet-facing

en

1:35

South Korean bank breaches expose customer and worker...

BMC Daily Cyber News ·

2026/10/05

Daily Cyber News: South Korean bank breaches expose customer and worker dataSensitive identity and financial details were exposed across several South Korean financial institutions, leading the country’s president to order a full investigation. Shinhan Bank reported about twenty five thousand affected customers, and Yegaram Savings Bank reported about forty thousand. Smaller incidents affected customers or workers at KB Kookmin Bank, Hana Bank, BNK Busan Bank, and Hyundai Capital. Key

en

1:37

Trusted Microsoft 365 traffic hides a Windows...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: Update 07 — English headline pendingGovernment, defense, diplomatic, academic and policy organizations were compromised by a Windows backdoor that placed its native command channel inside Microsoft 365. By July 2026, the campaign had reached approximately 350 endpoints across eight countries. Investigators identified 10 confirmed and five probable affected institutional environments and linked the activity to China with high confidence. Key context: Tailored phishing

en

1:49

Enterprise file-sharing gateways exposed by...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: Enterprise file-sharing gateways exposed by maximum-severity flaw Organizations using Kiteworks Email Protection Gateway face remote takeover if exposed appliances remain below version 9.4.1. Kiteworks released updates covering 126 vulnerabilities. The most serious is a maximum-severity chain that requires no login or user interaction and can let an attacker execute code before gaining full administrative control of the appliance. Key context: The wider update also fixes

en

1:34

AI-led attack reaches root access in seconds through...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: AI-led attack reaches root access in seconds through helpdesk system A Dutch vulnerability disclosure nonprofit suffered data access and exfiltration after an AI-powered attack chained two previously unknown flaws in its Zammad helpdesk system. Used together, the weaknesses allowed session hijacking, remote code execution and privilege escalation from the Zammad user to root within seconds. The attacker then reached other services before the response team intervened. Key

en

1:49

Water and telecom operators hit as ransomware abuses...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: Water and telecom operators hit as ransomware abuses trusted systems Water, telecom, government and education organizations face operational disruption as Warlock ransomware continues exploiting on-premises SharePoint systems. During the past two months, the campaign compromised at least four organizations: a water utility, a telecommunications provider, a regional government body and a university. Key context: The attackers planted web shells, extracted machine keys and

en

1:29

Attackers gain an early speed advantage in the AI...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: Attackers gain an early speed advantage in the AI security race Security teams are losing response time as attackers use AI to find weaknesses and move through compromised systems faster. Microsoft says attackers currently benefit from AI more quickly than defenders, particularly in vulnerability research and malware development. The median time between discovery in the wild and weaponization has fallen well below 24 hours. Key context: AI is also accelerating work after

en

1:31

Millions face identity risk after Pentagon personnel...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: Millions face identity risk after Pentagon personnel breachMillions of current and former defense personnel and their dependents now face long-term identity risk after unauthorized users accessed Pentagon personnel files. The Defense Manpower Data Center says the breach affects 2.76 million living people and two hundred ninety four thousand deceased individuals. Access continued from October 2025 until the issue was discovered on July 16th, 2026, and involved a

en

1:40

More than 543,000 live credentials remain exposed on...

BMC Daily Cyber News ·

2026/10/01

Daily Cyber News: More than 543,000 live credentials remain exposed on GitHubAn analysis found five hundred forty three thousand six hundred ninety nine unique working credentials exposed across public GitHub content. Researchers scanned 224 million repositories and more than 58 billion files. The median credential remained publicly accessible for 784 days, showing that many secrets survive far beyond the original development mistake. Key context: Removing a file isn’t enough because

en

1:57

AI coding agents publish 13,000 internal images to...

BMC Daily Cyber News ·

2026/10/01

Daily Cyber News: AI coding agents publish 13,000 internal images to public GitHub AI-assisted development workflows exposed more than thirteen thousand internal images from over 300 organizations in public GitHub repositories. The material appeared across more than 900 repositories and included customer records, credentials, internal dashboards, financial interfaces, and unreleased product features. In some cases, coding agents created or used public repositories because their command-line

en

1:31

Arizona court breach exposes foster care and...

BMC Daily Cyber News ·

2026/10/01

Daily Cyber News: Arizona court breach exposes foster care and protective order recordsSensitive records involving children and people seeking protection were copied during an attack on Arizona’s court system. The incident began when a court employee clicked a malicious link in a phishing email. Attackers then gained access to highly compressed backup files. Key context: The potential harm goes beyond ordinary identity theft. For more cybersecurity news and the full Daily Cyber newsletter,

en

All Episodes

Similar Podcasts

Expres Ráno

Expres FM

朝日新聞AJW 英語ニュース（The Asahi Shimbun Asia & Japan Watch）

朝日新聞ポッドキャスト

Fox News Radio 1 Minute Newscast

FOX News Podcasts

Business of Tech: Daily MSP News & IT Services Analysis

MSP Radio, Dave Sobel, Managed Service...

SBS Greek - SBS Ελληνικά

SBS