🔒 Security News Digest - 2026-10-20

📊 27 updates from 5 sources:

🔹 SecurityWeek: 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
https://www.securityweek.com/970000-medi-cal-members-affected-by-paradigm-healthcare-data-breach/

🦠 Malwarebytes: Man seeking love travels 2,000 km to meet an AI-generated woman
https://www.malwarebytes.com/blog/scams/2026/10/man-seeking-love-travels-2000-km-to-meet-an-ai-generated-woman

🔹 The Record from Recorded Future News: Defense contractors in two NATO allies hacked in recent Russia-linked campaign
https://therecord.media/european-defense-contractors-fancy-bear-espionage

🦠 Malwarebytes: Meta glasses caught recording conversations without wake phrase
https://www.malwarebytes.com/blog/news/2026/10/meta-says-it-fixed-smart-glasses-unprompted-eavesdropping

🔹 SecurityWeek: Hackers Steal 1.8 Million Records From Nikkei
https://www.securityweek.com/hackers-steal-1-8-million-records-from-nikkei/

🔹 The Hacker News: ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident
https://thehackernews.com/2026/10/connectwise-resets-credentials-as-cloud.html

🔹 The Hacker News: Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html

🔹 SecurityWeek: Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring
https://www.securityweek.com/microsoft-targets-rogue-ai-agents-with-dynamic-permissions-risk-scoring/

🔹 The Hacker News: Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
https://thehackernews.com/2026/10/go-issues-emergency-update-blocking.html

🔹 The Hacker News: What Security Teams Can Do To Tame Wild Code
https://thehackernews.com/2026/10/what-security-teams-can-do-to-tame-wild.html

🔹 The Hacker News: WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators
https://thehackernews.com/2026/10/whatsapp-hid-instructions-in-help-pages.html

🔹 SecurityWeek: Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say
https://www.securityweek.com/ex-openai-worker-accused-of-bugging-conference-room-planned-to-fly-to-saudi-arabia-prosecutors-say/

🦠 Malwarebytes: Google may add your number to all your accounts: How to stop it
https://www.malwarebytes.com/blog/mobile/2026/10/google-may-add-your-number-to-all-your-accounts-how-to-stop-it

🔹 SecurityWeek: AI Platform Cairn Abused to Hack Over 100 Organizations
https://www.securityweek.com/ai-platform-cairn-abused-to-hack-over-100-organizations/

🔹 The Hacker News: Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
https://thehackernews.com/2026/10/pegasus-spyware-infection-confirmed-on.html

🔹 SecurityWeek: Ahold Delhaize Restoring Services Disrupted by Cyberattack
https://www.securityweek.com/ahold-delhaize-restoring-services-disrupted-by-cyberattack/

🔹 SecurityWeek: The Key to AI Software Security Isn’t Speed, It’s Maturity
https://www.securityweek.com/the-key-to-ai-software-security-isnt-speed-its-maturity/

🔹 SecurityWeek: AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
https://www.securityweek.com/aomei-backupper-compromised-in-short-burst-supply-chain-campaign/

🔹 The Record from Recorded Future News: Anti-Putin messages disrupt nationwide school assessments in Russia
https://therecord.media/anti-putin-messages-disrupt-russian-education-platform

🔹 The Hacker News: Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
https://thehackernews.com/2026/10/hackers-use-autonomous-ai-agents-to.html

🔹 The Record from Recorded Future News: AOMEI yet to notify customers after hackers hijacked its software updates
https://therecord.media/aomei-yet-to-notify-customers-hijack-software

🔹 darkreading: Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
https://www.darkreading.com/cyberattacks-data-breaches/hackers-abuse-ai-pen-test-tool-cairn

🔹 The Record from Recorded Future News: EU cyber law won’t force fixes for fridge controllers hit in French attack
https://therecord.media/eu-cyber-law-wont-force-fixes-for-fridges-in-french-attack

🔹 The Hacker News: Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
https://thehackernews.com/2026/10/qilin-and-inc-ransomware-groups-exploit.html

🔹 darkreading: Close Identity Gaps in Software Development Before Unleashing AI
https://www.darkreading.com/application-security/close-identity-gaps-sdlc-before-ai

🔹 The Hacker News: Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
https://thehackernews.com/2026/10/critical-fortisiem-flaw-gets-public.html

🔹 SecurityWeek: US Agencies Detail Incident Response Practices for Rogue AI Agents
https://www.securityweek.com/us-agencies-detail-incident-response-practices-for-rogue-ai-agents/

#InfoSec #SecurityNews