2026-10-07: FortiBleed remains an active ransomware entry point as FBI confirms credentials can lock

Show Notes - 2026-10-07

Stories Covered: - Today: - FortiBleed Campaign Remains Active, Leads to Ransomware Deployment (https://cyberscoop.com/fortibleed-fortinet-vpn-ransomware-fbi-warning/) - Akira Ransomware Operators Deploy GOST Tunnels, LUNARAXE Extensions Post-Compromise (https://www.huntress.com/blog/mapping-akira-ransomware-attack) - Japan Extradites Qilin Ransomware Member to Germany (https://databreaches.net/2026/10/06/japan-hands-over-qilin-hacker-group-member-to-germany/) - Former Infrastructure Engineer Sentenced for Ransomware-Style Attack (https://databreaches.net/2026/10/06/engineer-sentenced-for-locking-over-3000-devices-on-employers-network/) - ClickFix Attacks Evolve with DNS TXT Records, Browser Cache Pre-Fetching (https://www.darkreading.com/cyberattacks-data-breaches/clickfix-attacks-evolve-better-hide-malicious-payloads) - 100+ Compromised Websites Deploy LunexStealer via Fake Cloudflare Verification (https://thehackernews.com/2026/10/100-compromised-websites-use-fake.html) - Healthcare Sector Unprepared for Post-Quantum Cryptography Era (https://www.darkreading.com/iot/exposed-healthcare-systems-quantum-ready) - Iranian APT Targets Iraqi Infrastructure with GitHub-Based C2 (https://unit42.paloaltonetworks.com/blinder-tunnel-targets-critical-infrastructure/) - MCP Marketplaces Lack Security Vetting for 15,465 Public Servers (https://thehackernews.com/2026/10/welcome-to-jungle-what-we-found-inside.html) - Microsoft Warns CISOs: AI Frontier Models Will Flood Patch Tuesday (https://www.microsoft.com/en-us/security/blog/2026/10/06/ciso-perspectives-on-managing-vulnerability-risks-in-the-age-of-ai/) - BigDiskBuster PoC Blocks Windows Defender Updates Without Exploit (https://www.darkreading.com/application-security/bigdiskbuster-microsoft-defender-running-blocking-updates) - Microsoft Blocks .msix and .msixbundle Attachments in Outlook (https://www.theregister.com/software/2026/10/06/microsoft-extends-the-outlook-naughty-step-with-two-more-file-types/5301350) - Classic Outlook Server Assisted Search Bug Leaves Stale Results (https://www.theregister.com/software/2026/10/06/classic-outlook-clings-to-stale-search-results-as-microsoft-works-on-a-fix/5301313) - Fake AI Chatbot Ad Portals Capture Credentials and MFA Codes (https://thehackernews.com/2026/10/fake-chatgpt-gemini-and-claude-ad.html) - Linux Backdoors Impersonate Email Security Products in Korea/Taiwan (https://thehackernews.com/2026/10/linux-backdoors-impersonate-email.html) - Anthropic Expands Cyber Verification Program as Glasswing Finds 129,000 Flaws (https://thehackernews.com/2026/10/anthropic-expands-claude-access-for.html) - OpenAI Agents Target Wikimedia: Etherpad Compromise Attempts, API Flooding (https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html) - Google PageBreak AI Agent Finds 500 XSS Flaws in Internal Web Apps (https://www.darkreading.com/application-security/google-pagebreak-ai-agent-500-flaws-web-apps) - FBI Blames Contractor's Missed Patch for ShinyHunters Breach (https://www.securityweek.com/fbi-blames-contractors-missed-patch-for-shinyhunters-breach/) - Attackers Obtain Counterfeit TLS Certificates for Google, Other Services (https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/) - NPM Malware Campaign MALFEX Accumulates 40,000 Downloads (https://www.securityweek.com/long-running-npm-malware-campaign-accumulates-40000-downloads/) - CrowdStrike: AI Agents Can Bypass Frontier Model Safety Classifiers (https://www.crowdstrike.com/en-us/blog/how-attackers-can-bypass-llm-safety-classifiers/) - Cisco Talos: Age of AI Agents Executing Cyber Attacks Already Here (https://blog.talosintelligence.com/one-breach-please-and-make-no-mistakes/) - Hitachi Energy REB500 DoS Vulnerabilities (https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-05) - Hit ...