October 2026

Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor 2026-10-19 at 19:28 By Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, […]

Healthcare Workers Claim Authentication Errors Delay Patient Care 2026-10-19 at 18:11 By According to a report from Imprivata, problems with authentication are delaying patient care within healthcare organizations. This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More 2026-10-19 at 18:02 By The worst problems don’t always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the […]

Police Suicides Spark Campaign Demanding Action 2026-10-19 at 17:18 By It Stops Now, a campaign calling for action over police suicides, was just launched.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

Security Leaders Discuss BAE Cyberattack 2026-10-19 at 17:00 By BAE Systems was hit with a cyberattack that halted production/distribution of bankruptcy notices.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories 2026-10-19 at 16:57 By The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed […]

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software 2026-10-19 at 16:57 By In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data into the agent’s prompt. Separately, Email-to-Case and Web-to-Case […]

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic 2026-10-19 at 15:57 By A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, […]