🔒 Security News Digest - 2026-10-20

📊 11 updates from 6 sources:

🔹 The Hacker News: Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html

🔹 The Record from Recorded Future News: Nigerian national given 8-year sentence for tax business hacks
https://therecord.media/nigerian-given-8-year-sentenc-tax-hacks

🔹 Cyber Exposure Alerts: Oracle October 2026 Critical Patch Update Addresses 1209 CVEs
https://www.tenable.com/blog/oracle-october-2026-critical-patch-update-addresses-1209-cves

🔹 The Record from Recorded Future News: 23andMe successor settles with California for $6 million over cybersecurity failings
https://therecord.media/23andme-california-data-breach-settlement

🔹 darkreading: Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQ
https://www.darkreading.com/insider-threats/ex-openai-engineer-secret-recorder-saudi-ties

🔹 The Record from Recorded Future News: California warns all public school students of data stolen in contractor breach
https://therecord.media/california-warns-all-public-school-students-of-data-breach

🔹 Latest Bulletins: CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew
https://aws.amazon.com/security/security-bulletins/rss/2026-140-aws/

🔹 The Record from Recorded Future News: FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024
https://therecord.media/fbi-says-safepay-ransomware-gang-among-most-active-600-victims

🔹 Unit 42: Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 20)
https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257/

🔹 Latest Bulletins: CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
https://aws.amazon.com/security/security-bulletins/rss/2026-141-aws/

🔹 darkreading: Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
https://www.darkreading.com/cyber-risk/tech-giants-emudhra-certificates-compromised-keys

#InfoSec #SecurityNews