Cybersecurity - Page 27

Three newly disclosed incidents: Ginkgo Bioworks says an outsider accessed data from cloud environments tied to its former biosecurity business; Turkey's data regulator says a ransomware attack on Yıldız Technical University may affect about 140,000 students and 4,500 staff; and Green Clinic in Ruston, Louisiana, is rebuilding after ransomware locked its records. What each organisation has confirmed.

On 8 October 2026 the US Justice Department and FBI seized web domains behind two hacking tools allegedly run by China-based Integrity Technology Group, linked to "Flax Typhoon". Eleven agencies from seven countries issued a joint advisory, and CISA added five old flaws to its exploited-vulnerabilities list. What was done, what is alleged, and what defenders are told.

An unreleased "Additional sandbox options" setting found in Google's Gemini desktop app for Mac would let the AI reach files, apps and network connections beyond the folders users connect today. It is hidden, unconfirmed by Google and arrives just as Apple is tightening Full Disk Access.

A critical Langflow flaw let MCP server settings run any command. Researchers say GitHub's Copilot CLI followed encrypted instructions that it refused in plain text; GitHub says that is not a vulnerability. Meanwhile Atlassian has split its 220+ agent tools into read, write and destructive tiers, and OpenAI has made Codex Auto-review free. What each one confirms.

Anthropic has expanded its Cyber Verification Program into three tiers, Defense, Red Team and Specialized, that relax Claude's cyber safety blocks for vetted security teams on Opus 5.5, Sonnet 5.5 and Mythos 5.1. Specialized applicants are reviewed with the US government. What each tier allows, and what Anthropic's own test shows.

A ransomware attack on SoftBank's IDC Frontier knocked out services for 495 customers, halting Nissui's logistics and Ibaraki's websites. Japan's police say Qilin has hit 53 Japanese firms. MrMax, GMO's infoQ and Nikkei disclosed breaches; Asos says hackers took detailed customer profiles; Oracle Health's count may near 20 million; and Denmark says its population register was looked up for 8.8 million people. What each organisation confirmed.

Arizona’s courts confirm data on 1.3 million people was copied; ccTLD registry hijacks let attackers obtain certificates for Google and other domains; exploitation attempts follow a public Atlassian PoC; Yoido Full Gospel Church confirms 850,000 members’ data exposed; the Double Counter Discord bot is breached; a MonsterCloud owner is charged; and the US offers $10m for accused HAFNIUM hacker Zhang Yu. Confirmed vs alleged, case by case.

From FortiBleed credential harvesting and ASOS customer notifications to UIC ransomware, Citrix NetScaler KEV deadlines and a new NetScaler flaw, CVE-2026-107406 (patch out; no known exploitation), Southern Company portal access and Advantest’s delayed PII notices — what is confirmed, what is alleged, and the patterns linking initial access to disclosure timing.

POLITICO obtained the Super Intelligence Force charter on 6 October 2026: a 120-day Jay Clayton-led task force on AI risks, preparedness and lab incident notices.

Trade press: an unidentified Base DeFi vault lost about 1,783 wstETH (~$6m) on 4 Oct 2026 after a multisig whitelist change. Firms say Aave V3 was not hit.