Threat Intelligence

Live threat and AI news from CISA, Krebs on Security, Bleeping Computer, SANS ISC, TechCrunch, The Verge, and Simon Willison — cross-referenced to open markets.

15-min cache
Bleeping ComputerHIGHOct 15, 2026

Microsoft fixes bug causing Windows black screens, Explorer crashes

Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. [...]

Bleeping ComputerHIGHOct 15, 2026

UK Legal Aid Agency: Hackers stole records dating back to 1978

The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978. [...]

TechCrunch AIMEDIUMOct 15, 2026

Figma announces new features to define how agents work on its platform

Figma is also releasing its code layers feature in open beta.

SANS ISCHIGHOct 15, 2026

Panchan's Mining Island [Guest Diary], (Wed, Oct 14th)

[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]

TechCrunch AIMEDIUMAIOct 15, 2026

Ricursive Intelligence is betting on AI-designed chips to help solve the compute crisis

The founders detailed how their startup is developing AI that can design chips, learn from each iteration, and improve subsequent designs, all with the goal of automating and accelerating the chip design process.

TechCrunch AIMEDIUMAIOct 15, 2026

Gudea leverages AI to help organizations prevent social media crises before they erupt

Every day, conversations unfold across social media and websites around the world. A seemingly insignificant post—whether it involves AI-generated misinformation, hate speech, or a damaging rumor—can quickly snowball into a much larger public controversy. Gudea, a company that tracks how stories and

Bleeping ComputerHIGHZero-DayVulnerabilityOct 14, 2026

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]

The Verge AIMEDIUMAIOct 14, 2026

McKinsey is making job applicants spar with a fake AI client

Consulting firm McKinsey & Company is going to ask some entry-level candidates to have a 10-minute conversation with an AI simulation of a client as part of the interview process, according to The Wall Street Journal. The AI simulation "aims to reflect 80% of the scenarios McKinsey consultants might

TechCrunch AIMEDIUMOct 14, 2026

Flock CEO says its microphones detect ‘just gunshots’ — its website says different

Langley’s comments come amid mounting scrutiny of Flock from privacy advocates, including the ACLU, and members of the public who are concerned about the misuse of its technology.

Simon WillisonMEDIUMAIOct 14, 2026

Tree Appreciator

Tool: Tree Appreciator Another game experiment with Claude. This one used the default Claude iPhone app (chat mode, not Claude Code mode), where I prompted Claude Opus 5.5 Max with: Build a three js game called "Tree appreciator" - it shows you two algorithmically generated trees and the game mechan

The Verge AIMEDIUMAIOct 14, 2026

Eight states sue OpenAI, saying ChatGPT isn’t safe for kids

OpenAI is facing a new wave of lawsuits from eight US states that accuse the company of harming children and misleading customers about the safety of ChatGPT, as reported earlier by Reuters. The lawsuits, filed separately by Iowa, Kansas, Nebraska, West Virginia, Arkansas, Arizona, Idaho, and Montan

Bleeping ComputerHIGHAPTOct 14, 2026

FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested

The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]

The Verge AIMEDIUMAIOct 14, 2026

The AI race is back on

Last week, Anthropic and OpenAI looked like they had the AI race to themselves, pulling ahead with increasingly powerful models that left their rivals in the dust. Google seemed hopelessly far behind, while Meta, despite spending billions to revive its floundering AI ambitions, had yet to establish

The Verge AIMEDIUMAIOct 14, 2026

Now that Character.AI is going bankrupt, what happens to all of its users’ data?

New York Attorney General Letitia James revealed a years-long multi-state investigation against Character.AI as they now seek to require protections on consumer data sold through its bankruptcy proceeding. James is among 40 bipartisan AGs who filed a notice of interest in Character.AI's bankruptcy c

TechCrunch AIMEDIUMAIOct 14, 2026

YouTube Music launches new labels as AI-generated music floods streaming platforms

The label will appear on the player page and include songs entirely generated by AI or partially, such as AI involved in composition and vocals.

The Verge AIMEDIUMAIOct 14, 2026

YouTube sticks new labels on AI-generated songs

YouTube is adding a "Made with AI" label to tracks that were "altered or fully generated" using AI, with a similar approach to its existing process for applying AI labels to videos. It doesn't sound like this will apply to any and all use of AI tools in making music, but according to YouTube, it […]

TechCrunch AIMEDIUMAIOct 14, 2026

Apate sends AI agents undercover to get scammed so they can gather fraud intelligence

Most companies use AI agents to ship products faster or speed up workflows. Apate.ai sends them undercover to get scammed.

Bleeping ComputerHIGHOct 14, 2026

Ledger asks sellers across Asia to halt sales after supply-chain attack

Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering. [...]

Bleeping ComputerHIGHZero-DayVulnerabilityOct 14, 2026

Cisco patches new Secure Email Gateway zero-day exploited in attacks

Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]

The Verge AIMEDIUMAIOct 14, 2026

My AI doppelganger tells me what to eat

This is Optimizer, a weekly newsletter sent from Verge senior reviewer Victoria Song that dissects and discusses the latest gizmos and potions that swear they're going to change your life. Opt in for Optimizer here. For the past 100 days or so, my mornings have had a new rhythm. When I wake up, the

Simon WillisonMEDIUMAIOct 14, 2026

AI is mass decompiling games. That's both awesome and scary.

AI is mass decompiling games. That's both awesome and scary. Indie game developer Popcar talks about the recent wave of AI-powered decompilation of existing games, enabling weird mashups between existing games, and producing a boom in game preservation projects to get old games working on new hardwa

Krebs on SecurityHIGHRansomwareOct 14, 2026

U.K. Sanctions Cryptomus for RU Money Laundering

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial res

CISA AlertsCRITICALVulnerabilityOct 14, 2026

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CVE-2026-10513

SANS ISCHIGHOct 14, 2026

Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)

Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).

Krebs on SecurityHIGHVulnerabilityOct 13, 2026

Microsoft Patches More Than 1,400 Security Flaws

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.

Simon WillisonMEDIUMAIOct 13, 2026

Redesigning source control at Anthropic

Redesigning source control at Anthropic Interesting piece from Anthropic describing why and how they built their own custom alternative to Git, based on the dramatic increase in rate of changes to their code after the past six months. In May 2026, Anthropic averaged around 2,500 code changes merged

Beta Feedback