This week connects actively exploited perimeter systems, compromised software and hardware trust chains, identity attacks, and the expanding role of AI on both sides of security operations—along with the evidence defenders need to patch, contain, and verify each risk.

This episode covers 25 cybersecurity stories.

Chapters:

00:00 Opening

00:34 Ivanti Warns of Actively Exploited Connect Secure Zero-Day

01:28 Palo Alto Networks alerts on critical PAN-OS RCE zero-day exploited in the wild

02:30 BeyondTrust patches zero-day exploited since August

03:23 Flax Typhoon Exploits Five Flaws Ahead of CISA October 11 Deadline

04:43 Microsoft Patch Tuesday October 2026: Key Vulnerabilities & Snort Rules

05:37 Unpatched AhsayCBS Flaws Exploited to Deploy Webshells and Crypto Miners

06:52 Critical Bricksforge WordPress Flaw Enables Unauthenticated RCE Exploited

07:42 Hackers Exploit Critical RCE Flaw in Collabora to Backdoor Nextcloud

08:30 Inside AvisLoader: New Windows Malware Loader Designed to Resist Disruption

09:35 Attackers Delivered Backdoor via AOMEI Backupper Update Server Tampering

10:20 Critical Docker Hub Flaw Allowed User Impersonation and Image Tampering

11:10 Ledger Confirms Spy Chip Implant Behind Crypto Wallet Thefts

11:55 Microsoft Disrupts 3 Phishing Kits Behind Over 1 Billion Scam Messages

12:42 UAT-11985 Targets Taiwan Research with Google AitM Phishing via Fake Invites

13:27 How to Run a Deepfake Readiness Drill Before a Cloned Voice Hits Your Team

14:22 Critical CVSS 10 Flaw in SAP Cloud SDK for Python Exposes OAuth2 Credentials

15:17 How to Keep AI Agents Operating Within Their Permissions

16:31 Chinese Hacker Uses ARTEX AI and Claude Agents in South Korean Bank Attacks

17:29 CyberXero Uses AI-Powered Attack to Steal Over 628,000 Ukrainian Records

18:14 Anthropic Warns AI Could Enable Self-Propagating IoT Botnets

19:01 NIST, NSA, and CISA Release Incident Readiness Practices for Super Intelligence

20:00 Critical PwnEscape Linux Kernel Flaw Allows Guest VMs to Leak Host Memory

20:58 Hackers Hijack D-Link and Ubiquiti Devices to Resell Bandwidth

21:45 Citizen Lab Links Zero-Click Candiru Spyware to Al Jazeera via Ads

22:39 Nippon Columbia Malware Incident Exposes 8.7 Million Records

23:29 Closing

SOC Minute: https://www.socminute.com

#Cybersecurity #SOC #SecurityNews

Support SOC Minute 💙

SOC Minute is independent and free for everyone. If you'd like to help keep the project running, you can support us on Patreon:

https://www.patreon.com/SOCMinute

This week, SOC Minute follows active attacks against edge infrastructure, identity and data breaches, AI-branded phishing, targeted malware, and three distinct ways attackers are poisoning trust across the open-source development ecosystem.

This episode covers 24 cybersecurity stories.

Chapters:

00:00 Opening

00:33 New NetScaler Zero-Day Targeted Attacks Can Disrupt SAML Deployments

01:19 Max severity SonicWall SMA1000 flaw now exploited in attacks

02:12 Cisco warns of critical flaws allowing Nexus switch takeover

03:10 Realtek Jungle SDK Exploit Attempts Spread Cling Botnet via STUN C2

04:05 Danish University DTU Data Breach Exposes Up to 200,000 Users

04:57 Denmark's Population Registry Data Breach Affects 8.8 Million People

05:49 ASOS confirms data breach after hacked in-app notifications

06:42 Hackers Hijack Google Domains via ccTLD Registry Breaches

07:38 China-Aligned TA419 Targets U.S. AI Policy Experts with Microsoft AitM Phishing

08:40 Phishing Platform Targets Credentials via Fake AI Chatbot Ad Portals

09:36 Hackers Use Google Ads and Bing Redirects to Spread Claude ClickFix Malware

10:29 Linux Backdoors Evade Detection by Mimicking Email Security Tools in Asia

11:27 UAC-0099 Deploys ASHVEIN RAT Targeting Ukrainian Government Staff

12:25 Chinese State-linked Hackers Use Automated Tools and Manual Exploits to Steal Data

13:30 Eight Malicious npm Packages Delivered Overlord RAT and Stealer

14:16 FakeGit Malware Campaign Relaunches with Over 17,600 Malicious GitHub Repos

15:21 Credential-Stealing GitHub Actions Workflows Found in Thousands of Repos

16:18 Critical File-Access Flaw Found in Atlassian Jira and Confluence

17:22 Anthropic Launches Free AI Vulnerability Scanner for Open-Source

18:12 Critical Dell System Update Vulnerability Allows Root Privilege Escalation

18:56 Critical Buffer Overflow Found in Savannah lwIP SMTP Client v2.2.1

19:57 Critical Vulnerabilities Found in Grid Protection Alliance openPDC and openHistorian

20:59 Critical LMCache Flaw Allows Unauthenticated Remote Code Execution

21:58 PoeLLM Malware Infects Over 3,400 Servers to Expand Crypto Mining Botnet

22:50 Closing

SOC Minute: https://www.socminute.com

#Cybersecurity #SOC #SecurityNews

This week, SOC Minute follows active exploitation from exposed enterprise systems and persistent web compromise into stolen identities, targeted malware, and the growing role of AI in data exposure, social engineering, and automated attacks.

This episode covers 18 cybersecurity stories.

Chapters:

00:00 Opening

00:40 Attackers Exploit Oracle PeopleSoft Flaw to Deploy Web Shells

01:50 WordPress Backdoor Rebuilds Itself Using Files, Database, and Shared Memory

02:46 Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC and Gateway

03:46 Cisco Warns of Critical Authentication Bypass in SD-WAN Manager

04:57 CISA Adds New Fortinet FortiMail Vulnerability to Exploited Catalog

06:06 Critical FortiMail Zero-Day Allows Unauthenticated Arbitrary File Writes

07:20 Dell CSM Flaws Allow Unauthenticated Admin and Root Access on Kubernetes

08:21 Critical Vulnerabilities Found in Armatura One Affecting Access Control Systems

09:38 Warlock Ransomware Exploits SharePoint in Water and Telecom Attacks

10:33 French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Weeks

11:31 Star Blizzard Advances Phishing and Malware with RedFlick Technique

12:29 Lunex Stealer Uses AMD Driver to Evade Security and Steal Credentials

13:27 NeedyMantis: Modular Malware Threat in Targeted Intrusions

14:24 China-Linked UAT-11587 Targets Asian Governments with Antino Backdoor

15:16 OpenAI Agents Accidentally Uploaded User Images to Third-Party Sites

16:29 80,000+ Organizations Exposed by Stolen AI Logins and LLMjacking

17:39 Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

18:49 Automated AI Agent Used to Breach Cybersecurity Nonprofit DIVD

20:00 Closing

SOC Minute: https://www.socminute.com

#Cybersecurity #SOC #SecurityNews