🔒 Security News Digest - 2026-10-22

📊 21 updates from 8 sources:

🔹 Security News | TechCrunch: Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
https://techcrunch.com/2026/10/22/chinese-hackers-spied-on-thousands-of-companies-after-breaching-it-giant-connectwise/

🔹 Latest Bulletins: CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing
https://aws.amazon.com/security/security-bulletins/rss/2026-144-aws/

🦠 Malwarebytes: Facebook’s misleading privacy claims land Meta a $25 billion penalty
https://www.malwarebytes.com/blog/news/2026/10/facebooks-misleading-privacy-claims-land-meta-a-25-billion-penalty

🔹 Unit 42: The Current Landscape of OAuth Attacks
https://unit42.paloaltonetworks.com/current-landscape-oauth-attacks/

🔹 The Hacker News: Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html

🔹 Unit 42: EMudhra Intermediate CA Certificates Compromised
https://unit42.paloaltonetworks.com/emudhra-certificate-compromise/

🔹 The Hacker News: ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
https://thehackernews.com/2026/10/threatsday-ai-secrets-leak-pingcap.html

🔹 The Hacker News: eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
https://thehackernews.com/2026/10/emudhra-to-exit-global-ssltls-business.html

🔹 The Record from Recorded Future News: Indian tech company eMudhra announces withdrawal from certificate business after security incident
https://therecord.media/indian-tech-company-announces-withdrawal-certificate-business-incident

🔹 Latest Bulletins: CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook
https://aws.amazon.com/security/security-bulletins/rss/2026-145-aws/

🔹 The Hacker News: Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
https://thehackernews.com/2026/10/arista-warns-of-critical-velocloud-sql.html

🔹 The Hacker News: The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
https://thehackernews.com/2026/10/the-ai-agent-nobody-owns-watch-expert.html

🔹 darkreading: Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
https://www.darkreading.com/ics-ot-security/eu-grocers-unpatched-fridge-firmware-french

🔹 iTnews - Security: Russia-linked hackers use decentralised network in Ukraine cyberattack
https://www.itnews.com.au/news/russia-linked-hackers-use-decentralised-network-in-ukraine-cyberattack-629846?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

🔹 iTnews - Security: India's eMudhra exits website security business
https://www.itnews.com.au/news/indias-emudhra-exits-website-security-business-629845?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

🔹 Latest Bulletins: CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
https://aws.amazon.com/security/security-bulletins/rss/2026-146-aws/

🔹 iTnews - Security: AGL hits half-million milestone with passkey adoption
https://www.itnews.com.au/news/agl-hits-half-million-milestone-with-passkey-adoption-629843?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

🔹 darkreading: What We Missed: Feds Lasso Texas Laptop Farms
https://www.darkreading.com/insider-threats/texas-laptop-farms-north-korean-it-workers

🔹 Latest Bulletins: CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
https://aws.amazon.com/security/security-bulletins/rss/2026-147-aws/

🔹 darkreading: Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
https://www.darkreading.com/cyberattacks-data-breaches/microsoft-storm-0940-connectwise-supply-chain-attack

🔹 The Record from Recorded Future News: Toronto crime tips org freezes operations after details of data breach come to light
https://therecord.media/toronto-crime-tips-org-freezes-ops-after-breach

#InfoSec #SecurityNews