This week connects actively exploited perimeter systems, compromised software and hardware trust chains, identity attacks, and the expanding role of AI on both sides of security operations—along with the evidence defenders need to patch, contain, and verify each risk.

This episode covers 25 cybersecurity stories.

Chapters:

00:00 Opening

00:34 Ivanti Warns of Actively Exploited Connect Secure Zero-Day

01:28 Palo Alto Networks alerts on critical PAN-OS RCE zero-day exploited in the wild

02:30 BeyondTrust patches zero-day exploited since August

03:23 Flax Typhoon Exploits Five Flaws Ahead of CISA October 11 Deadline

04:43 Microsoft Patch Tuesday October 2026: Key Vulnerabilities & Snort Rules

05:37 Unpatched AhsayCBS Flaws Exploited to Deploy Webshells and Crypto Miners

06:52 Critical Bricksforge WordPress Flaw Enables Unauthenticated RCE Exploited

07:42 Hackers Exploit Critical RCE Flaw in Collabora to Backdoor Nextcloud

08:30 Inside AvisLoader: New Windows Malware Loader Designed to Resist Disruption

09:35 Attackers Delivered Backdoor via AOMEI Backupper Update Server Tampering

10:20 Critical Docker Hub Flaw Allowed User Impersonation and Image Tampering

11:10 Ledger Confirms Spy Chip Implant Behind Crypto Wallet Thefts

11:55 Microsoft Disrupts 3 Phishing Kits Behind Over 1 Billion Scam Messages

12:42 UAT-11985 Targets Taiwan Research with Google AitM Phishing via Fake Invites

13:27 How to Run a Deepfake Readiness Drill Before a Cloned Voice Hits Your Team

14:22 Critical CVSS 10 Flaw in SAP Cloud SDK for Python Exposes OAuth2 Credentials

15:17 How to Keep AI Agents Operating Within Their Permissions

16:31 Chinese Hacker Uses ARTEX AI and Claude Agents in South Korean Bank Attacks

17:29 CyberXero Uses AI-Powered Attack to Steal Over 628,000 Ukrainian Records

18:14 Anthropic Warns AI Could Enable Self-Propagating IoT Botnets

19:01 NIST, NSA, and CISA Release Incident Readiness Practices for Super Intelligence

20:00 Critical PwnEscape Linux Kernel Flaw Allows Guest VMs to Leak Host Memory

20:58 Hackers Hijack D-Link and Ubiquiti Devices to Resell Bandwidth

21:45 Citizen Lab Links Zero-Click Candiru Spyware to Al Jazeera via Ads

22:39 Nippon Columbia Malware Incident Exposes 8.7 Million Records

23:29 Closing

SOC Minute: https://www.socminute.com

#Cybersecurity #SOC #SecurityNews

Support SOC Minute 💙

SOC Minute is independent and free for everyone. If you'd like to help keep the project running, you can support us on Patreon:

https://www.patreon.com/SOCMinute