Comments on: Cyber security news October 2026

By: Tomi Engdahl

Tomi Engdahl — Fri, 02 Oct 2026 13:57:59 +0000

Cybercrime
In Rare Move, Alleged Iranian State Hacker Extradited to US

Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and government entities in the US and abroad.

https://www.securityweek.com/in-rare-move-iranian-hacker-accused-of-working-for-irgc-extradited-to-us/

By: Tomi Engdahl

Tomi Engdahl — Fri, 02 Oct 2026 13:57:44 +0000

Malware & Threats
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.

https://www.securityweek.com/warlock-expands-sharepoint-exploitation-in-critical-infrastructure-attacks/

By: Tomi Engdahl

Tomi Engdahl — Fri, 02 Oct 2026 13:57:23 +0000

Artificial Intelligence
AI Agents Aimed SQL Injection at US and Canadian Government Sites

The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI.

https://www.securityweek.com/ai-agents-aimed-sql-injection-at-us-and-canadian-government-sites/

By: Tomi Engdahl

Tomi Engdahl — Fri, 02 Oct 2026 13:46:48 +0000

For years, one of Android’s selling points was that it was the more open alternative to Apple’s tightly controlled ecosystem. However, the tightening of Google’s environment has made it nearly impossible for small app developers to reach users.

By: Tomi Engdahl

Tomi Engdahl — Fri, 02 Oct 2026 11:20:04 +0000

Voiko AI tehdä turvallisuuskriittisiä päätöksiä verkon reunalla?
https://etn.fi/index.php/13-news/19357-voiko-ai-tehdae-turvallisuuskriittisiae-paeaetoeksiae-verkon-reunalla

Tekoälyä viedään yhä pienempiin laitteisiin verkon reunalle, mutta kuinka paljon päätösvaltaa sille voidaan antaa? Pretzl Connect -tapahtuman paneelissa kysymykseen suhtauduttiin varauksella. AI voi auttaa päätöksenteossa, mutta viimeistä sanaa sille ei vielä haluta antaa.

Silicon Labsin tuotepäällikkö Tamas Daranyin mukaan ongelma tulee tekoälyn perusluonteesta. AI perustuu tilastolliseen päättelyyn, joten sen tulos ei koskaan ole sataprosenttisen varma. Siksi esimerkiksi auton ABS-järjestelmän kaltaista turvallisuuskriittistä toimintoa ei hänen mukaansa voida rakentaa samalla tavalla AI päätöksenteon varaan kuin determinististä algoritmia.

By: Tomi Engdahl

Tomi Engdahl — Fri, 02 Oct 2026 11:03:35 +0000

Epäily: Kansanedustajien kodeissa käyty – Stubb kertoo karusta kokemuksestaan
Presidentti Alexander Stubb sanoi tietävänsä, miltä kotiin tunkeutuminen tuntuu. Taustalla ovat yli kymmenen vuoden takaiset tapahtumat.
https://www.iltalehti.fi/politiikka/a/46aef0a4-7f04-496f-b51e-b9a27c207afe

By: Tomi Engdahl

Tomi Engdahl — Fri, 02 Oct 2026 07:43:56 +0000

Experts issue warning after voice scam AI attacks skyrocket
Data from Microsoft’s digital defence report has also reported a jump in attacks where hackers impersonate business contacts in order to gain information or access to services
https://www.independent.co.uk/tech/voice-phishing-scam-ai-microsoft-cyber-attack-b3059969.html?fbclid=IwdGRjcAUsL6ljbGNrBSwvg2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeG5yhVThIuHoe3B-Q-HvhtMOuVYUiBNd4Q5ps5yhiA7z60HLtVhZTIMLdzzo_aem_YuPE97qWilrw1jfPQOBOfA

Voice phishing incidents have sharply increased over the past year as cyber attackers increasingly leverage AI technology to execute scams, according to research.

Data from Microsoft’s digital defence report highlights a rise in incidents where hackers impersonate business contacts to obtain information or service access.

Security experts at Microsoft noted that 27 per cent of cyber threat activity targeted government agencies or services, pointing to heightened concerns over cyber warfare.

The report found that expanding AI use is altering how “vulnerabilities are identified, how attacks are developed, how defenders prioritise risk, and how organisations respond to emerging threats”.

By: Tomi Engdahl

Tomi Engdahl — Thu, 01 Oct 2026 13:49:51 +0000

Artificial Intelligence
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution.

https://www.securityweek.com/google-ai-is-changing-the-pace-and-profile-of-vulnerability-discovery/

By: Tomi Engdahl

Tomi Engdahl — Thu, 01 Oct 2026 13:48:13 +0000

https://www.securityweek.com/ftc-is-investigating-openai-and-anthropic-over-possible-risks-to-consumers/

By: Tomi Engdahl

Tomi Engdahl — Thu, 01 Oct 2026 13:47:44 +0000

Artificial Intelligence
Zammad Zero-Days Exploited in AI-Powered DIVD Hack

The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.

https://www.securityweek.com/zammad-zero-days-exploited-in-ai-powered-divd-hack/