BMC Daily Cyber News

1:46

Malicious Custom GPTs steer users into remote access...

BMC Daily Cyber News ·

2026/10/05

Daily Cyber News: Malicious Custom GPTs steer users into remote access malwareUsers searching for AI services can be manipulated into installing remote access malware themselves. In this campaign, attackers used sponsored search results, a malicious Custom GPT, a fake service notice, and a counterfeit CAPTCHA. Victims were then instructed to paste an obfuscated PowerShell command. Key context: The attack borrows trust from familiar AI and CAPTCHA experiences while shifting the final

en

1:33

AI coding agents exposed 13,000 internal screenshots...

BMC Daily Cyber News ·

2026/10/05

Daily Cyber News: AI coding agents exposed 13,000 internal screenshots on GitHub Credentials, customer records, internal dashboards, financial interfaces, and unreleased features appeared in more than thirteen thousand publicly accessible screenshots. The images came from over 300 organizations and were found across more than 900 public GitHub repositories. Coding agents reportedly created public repositories or used public release assets while handling visual evidence for private pull

en

1:56

Pentagon breach exposes long-lived identity data for...

BMC Daily Cyber News ·

2026/10/05

Daily Cyber News: Pentagon breach exposes long-lived identity data for millions Millions of people face continuing identity and impersonation risk after unauthorized users accessed a Defense Manpower Data Center system. The incident affected 2.76 million living people and approximately two hundred ninety four thousand deceased individuals. Access reportedly continued from October 2025 until July 2026 through a file-sharing weakness. Key context: The Pentagon has reported no evidence that

en

1:35

Old SharePoint gaps still expose critical services to...

BMC Daily Cyber News ·

2026/10/05

Daily Cyber News: Old SharePoint gaps still expose critical services to ransomware Water, telecom, government, and university organizations remain exposed to ransomware through SharePoint weaknesses disclosed more than a year ago. Warlock operators recently hit at least four organizations across Europe, Africa, and Latin America. They used unpatched SharePoint servers to get inside and then expanded through the Windows domain. Key context: The operation shows how an old internet-facing

en

1:35

South Korean bank breaches expose customer and worker...

BMC Daily Cyber News ·

2026/10/05

Daily Cyber News: South Korean bank breaches expose customer and worker dataSensitive identity and financial details were exposed across several South Korean financial institutions, leading the country’s president to order a full investigation. Shinhan Bank reported about twenty five thousand affected customers, and Yegaram Savings Bank reported about forty thousand. Smaller incidents affected customers or workers at KB Kookmin Bank, Hana Bank, BNK Busan Bank, and Hyundai Capital. Key

en

1:37

Trusted Microsoft 365 traffic hides a Windows...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: Update 07 — English headline pendingGovernment, defense, diplomatic, academic and policy organizations were compromised by a Windows backdoor that placed its native command channel inside Microsoft 365. By July 2026, the campaign had reached approximately 350 endpoints across eight countries. Investigators identified 10 confirmed and five probable affected institutional environments and linked the activity to China with high confidence. Key context: Tailored phishing

en

1:49

Enterprise file-sharing gateways exposed by...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: Enterprise file-sharing gateways exposed by maximum-severity flaw Organizations using Kiteworks Email Protection Gateway face remote takeover if exposed appliances remain below version 9.4.1. Kiteworks released updates covering 126 vulnerabilities. The most serious is a maximum-severity chain that requires no login or user interaction and can let an attacker execute code before gaining full administrative control of the appliance. Key context: The wider update also fixes

en

1:34

AI-led attack reaches root access in seconds through...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: AI-led attack reaches root access in seconds through helpdesk system A Dutch vulnerability disclosure nonprofit suffered data access and exfiltration after an AI-powered attack chained two previously unknown flaws in its Zammad helpdesk system. Used together, the weaknesses allowed session hijacking, remote code execution and privilege escalation from the Zammad user to root within seconds. The attacker then reached other services before the response team intervened. Key

en

1:49

Water and telecom operators hit as ransomware abuses...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: Water and telecom operators hit as ransomware abuses trusted systems Water, telecom, government and education organizations face operational disruption as Warlock ransomware continues exploiting on-premises SharePoint systems. During the past two months, the campaign compromised at least four organizations: a water utility, a telecommunications provider, a regional government body and a university. Key context: The attackers planted web shells, extracted machine keys and

en

1:29

Attackers gain an early speed advantage in the AI...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: Attackers gain an early speed advantage in the AI security race Security teams are losing response time as attackers use AI to find weaknesses and move through compromised systems faster. Microsoft says attackers currently benefit from AI more quickly than defenders, particularly in vulnerability research and malware development. The median time between discovery in the wild and weaponization has fallen well below 24 hours. Key context: AI is also accelerating work after

en

1:31

Millions face identity risk after Pentagon personnel...

BMC Daily Cyber News ·

2026/10/02

Daily Cyber News: Millions face identity risk after Pentagon personnel breachMillions of current and former defense personnel and their dependents now face long-term identity risk after unauthorized users accessed Pentagon personnel files. The Defense Manpower Data Center says the breach affects 2.76 million living people and two hundred ninety four thousand deceased individuals. Access continued from October 2025 until the issue was discovered on July 16th, 2026, and involved a

en

1:40

More than 543,000 live credentials remain exposed on...

BMC Daily Cyber News ·

2026/10/01

Daily Cyber News: More than 543,000 live credentials remain exposed on GitHubAn analysis found five hundred forty three thousand six hundred ninety nine unique working credentials exposed across public GitHub content. Researchers scanned 224 million repositories and more than 58 billion files. The median credential remained publicly accessible for 784 days, showing that many secrets survive far beyond the original development mistake. Key context: Removing a file isn’t enough because

en

1:57

AI coding agents publish 13,000 internal images to...

BMC Daily Cyber News ·

2026/10/01

Daily Cyber News: AI coding agents publish 13,000 internal images to public GitHub AI-assisted development workflows exposed more than thirteen thousand internal images from over 300 organizations in public GitHub repositories. The material appeared across more than 900 repositories and included customer records, credentials, internal dashboards, financial interfaces, and unreleased product features. In some cases, coding agents created or used public repositories because their command-line

en

1:31

Arizona court breach exposes foster care and...

BMC Daily Cyber News ·

2026/10/01

Daily Cyber News: Arizona court breach exposes foster care and protective order recordsSensitive records involving children and people seeking protection were copied during an attack on Arizona’s court system. The incident began when a court employee clicked a malicious link in a phishing email. Attackers then gained access to highly compressed backup files. Key context: The potential harm goes beyond ordinary identity theft. For more cybersecurity news and the full Daily Cyber newsletter,

en

1:42

Bitget loses $387.5 million after third-party...

BMC Daily Cyber News ·

2026/10/01

Daily Cyber News: Bitget loses $387.5 million after third-party security breach Cryptocurrency exchange Bitget lost three hundred eighty seven point five dollars million after attackers reached its wallet environment through third-party security products. Two separate investigations concluded that zero-day weaknesses in two security appliances were used to gain privileged access. The attackers placed a web shell on one appliance, moved laterally into a production wallet job server, and

en

1:43

AI is accelerating the race between flaw discovery...

BMC Daily Cyber News ·

2026/10/01

Daily Cyber News: AI is accelerating the race between flaw discovery and exploitation Security teams are entering a faster and more crowded vulnerability cycle. Monthly disclosures increased from five thousand forty five in January 2026 to ten thousand seven hundred forty in August 2026. At the same time, observed exploitation rose from an average of 10.5 vulnerabilities per month in 2025 to 18 in 2026. Key context: The practical problem is prioritization. For more cybersecurity news and

en

1:43

Cisco SD-WAN admin takeover path is under active attack

BMC Daily Cyber News ·

2026/10/01

Daily Cyber News: Cisco SD-WAN admin takeover path is under active attack Cisco Catalyst SD-WAN Manager is facing an actively exploited route to administrative control. An attacker who has no credentials can send a crafted A P I request, bypass authentication, and reach the system with the privileges of the admin user. The issue affects deployments regardless of configuration. Key context: This matters because a centralized network-management platform can give an intruder significant

en

1:34

NetScaler attacks force service shutdowns across...

BMC Daily Cyber News ·

2026/10/01

Daily Cyber News: NetScaler attacks force service shutdowns across critical sectors Organizations across North America and Europe are disrupting services as they respond to attacks against NetScaler remote-access infrastructure. Two critical weaknesses are under active exploitation and have been added to CISA’s Known Exploited Vulnerabilities catalog. Reporting identified at least 78 targeted organizations, and more than twenty thousand exposed instances were potentially vulnerable. Key

en

1:26

Rail operators face ransomware disruption and...

BMC Daily Cyber News ·

2026/09/30

Daily Cyber News: Rail operators face ransomware disruption and customer email exposureCyber incidents disrupted one Japanese railway group and exposed customers at another. Ransomware forced Keio Corporation to shut down parts of its network after business systems failed. Train services continued normally, but some group companies and a hotel experienced operational difficulties. Key context: Keio had not found evidence of information leakage, but its investigation remained underway. For

en

1:40

Stolen passwords expose French tax data for seven weeks

BMC Daily Cyber News ·

2026/09/30

Daily Cyber News: Stolen passwords expose French tax data for seven weeks An attacker used stolen staff passwords to take French tax data covering hundreds of thousands of taxpayers and businesses. The activity continued during June and July and went undetected for seven weeks. Neither the tax administration nor the national cybersecurity agency detected the data leaving. Key context: Valid staff credentials can make malicious activity resemble normal access unless identity and data

en

All Episodes

Similar Podcasts

Expres Ráno

Expres FM

WSJ What’s News

The Wall Street Journal

iHeartRadio 24/7 News: The Latest

iHeartPodcasts and TTWN

Sarnia News Today

Blackburn Media

CNN 5 Things

CNN Podcasts