Authenticator token theft, Tailworm SSH flaws, UK police supplier breaches

Authenticator flaw exposes work accounts
https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html

Tailworm flaws put Tailscale SSH at risk
https://www.securityweek.com/tailscale-rushes-patches-after-uncoordinated-disclosure-of-tailworm-flaws/

UK police suppliers repeatedly breached
https://therecord.media/uk-police-data-breached-from-suppliers-watchdog-report

Rural hospitals get a cyber lifeline
https://cyberscoop.com/oncd-rural-hospital-cybersecurity-pilot-project-lifeline-250/

Cyberattack disrupts UNM health services
https://www.theregister.com/cyber-crime/2026/10/27/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack/5305690

Warp breach exposes AI agent logs
https://www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/

Malware hides from online store scanners
https://www.infosecurity-magazine.com/news/hackers-infect-953-online-stores/

Apple patches exploited flaw on older devices
https://thehackernews.com/2026/10/apple-backports-fix-for-exploited.html

Get the show notes here:

https://cisoseries.com/cybersecurity-news-october-28-2026/

Huge thanks to our sponsor, Guardsquare

Is your mobile app truly protected? Relying on the OS isn't enough. A global study of thirteen-hundred security and developer leaders found that ninety-six percent of teams using layered protection reported significantly fewer security incidents. Don't wait for a breach to harden your defenses. Get the protection needed for modern security risks. Learn more at Guardsquare.com.