The Watch
Reads the advisories so you don't have to. What actually changed for defenders today, which fix ships first, and when a CVE is safe to ignore.
Proofpoint has agreed to acquire Varonis in an all-cash deal valued at about $6.3 billion, or $49.75 a share. Varonis expects the deal to close in the first half of 2027, and until then the two companies stay independent.
Perspective Coverage
19 publishersReality
Musk proposed the Oct. 14 Starlink speed cap on Ukrainian forces to Trump, the Telegraph reports, citing four sources. Musk had said on X that the U.S. government decides any limits, and SpaceX applied the cap without warning Kyiv.
Reality
Sansec disputes Adobe's 30-day patch window for CVE-2026-103849, a maximum-severity flaw in Magento and Adobe Commerce. It has seen no attacks yet but expects mass exploitation soon, citing StyleSmuggler's three days from hotfix to mass attacks.
Reality
Calif published a working exploit that gets root on OpenBSD 7.9 past KARL, SMAP and SMEP by chaining two flaws patched on September 14 and 30. Neither flaw has a CVE, and The Hacker News reports no evidence of attacks.
Reality
Intruder's survey of 500 US and UK security and engineering leaders finds 47% go over a month between full pentests while 68% ship to production at least daily. Only 4% say their testing frequency gives sufficient coverage, according to findings Intruder published on its own site.
Reality
Campaigns and PACs spent over $137 million on AI-generated or AI-enhanced midterm ads, Wesleyan and AdImpact findings show. Most carried no AI label, and some showed real officials in scenes that never happened, the New York Times reported.
Perspective Coverage
3 publishersReality
Attackers altered files on AOMEI's update servers in windows of five to ten minutes between May and July 2026 to push a backdoor to Backupper installs. AOMEI has reported fixing its servers, but the researchers say that does not remove the backdoor from machines already hit.
Reality
Reuters reports, citing U.S. and Western officials, that the Oct. 14 Starlink slowdown on Ukraine's military was ordered from inside the White House. A senior U.S. official denied it came from Trump; no one has named who issued it.
Reality
Ukraine's military can use Starshield on the move again, a Defense Ministry source says, after a speed limit disrupted drone missions. The cause is unexplained, and officials are in talks with SpaceX and its partners to find it.
Perspective Coverage
3 publishersReality
BeyondTrust says a suspected China-nexus actor has exploited Remote Support flaw CVE-2026-102764 since late August. SaaS customers were patched on October 8, but self-hosted installs without automatic updates must be updated by hand.
Perspective Coverage
8 publishersReality
Citizen Lab said Discover-Tech's ads delivered zero-click Candiru attacks to at least 45 Al Jazeera devices. Google and IAB Europe have delisted the vendor, but Citizen Lab cannot yet attribute the attacks to any party.
Perspective Coverage
14 publishersReality
Group-IB found a public reference to a KGB RAT server at version 0.1 from January 2022, years before the trojan went on sale from $150 a month. Group-IB says the "administration tool" pitch covers a surveillance and control toolkit.
Reality
Attackers exploiting CVE-2024-47575 on one FortiManager took running configs for more than 500 managed FortiGate firewalls, Unit 42 reports. Patching the manager does not retire the credentials and private keys in that archive.
Perspective Coverage
5 publishersReality
CERT-In said on October 15 that AI agents under test read business records on live Indian systems. No victim detected the access, and CERT-In calls the weaknesses behind it ordinary: exposed credentials and loose cloud roles.
Perspective Coverage
10 publishersReality
Coopérative U CEO Dominique Schelcher confirmed on October 12 that a cyber-attack hit refrigeration at several of its stores from October 11. The Danfoss link, the loss figures and the other chains named come from press reports, and Danfoss was asked for comment.
Perspective Coverage
53 publishersReality
Microsoft and NVIDIA say weight openness alone does not determine AI risk, in a joint paper grounded in ISO standards and NIST's AI framework. Microsoft says enterprises should adapt its taxonomy and tie each risk to evaluations, mitigations and an accountable owner.
Reality
Presidential adviser Serhii Beskrestnov said on Oct. 14 that SpaceX capped Starlink's StarShield military service package at 100 mph on moving terminals. A Defense Ministry source says the cause is under investigation.
Perspective Coverage
23 publishersReality
OpenAI lets advertisers target ChatGPT users by uploaded email, phone number or Android advertising ID, according to 404 Media's tests. Prompts that users may assume are private are a targeting input too.
Perspective Coverage
3 publishersReality
In December 2024, KrebsOnSecurity reported analyst Richard Sanders's finding that all 122 cybercrime services he tested took payments through Cryptomus. The processor listed a Vancouver address, where a CTV and IJF count found at least 90 registrations.
Reality
In a July 2021 issue brief, the Atlantic Council argued that Russia's push to isolate RuNet could make Kremlin cyber operations abroad more assertive. It said success was uncertain, so its five takeaways for US and European defenders were hypotheses to test.
Reality
VulnCheck counted Chrome CVEs up 563% and GitHub-issued CVEs up 476% year to date in a May 14, 2026 post. It calls the rise consistent with AI-assisted bug finding, but whether the volume lasts is unknown, so exploitation data still sets patch order.
Reality
In a May 15, 2026 public service announcement, the FBI warned that ShinyHunters may target students and families with threats and swatting. The group had claimed the attack behind a nationwide learning-platform outage, and the bureau's advice was to pay nothing and verify any contact through a channel already known.
Reality
Trump rejected AI guardrails as the House was scheduled to break at the end of that week until after the midterms, ABC reported on September 15, 2026. ABC judged federal AI rules unlikely before the vote, so security teams will be working to their own policies until Congress returns.
Reality
Cisco Talos's February 2025 analysis of Salt Typhoon's telecom intrusions found the actor used stolen legitimate logins on Cisco devices in all but one case. It then pulled more logins from weakly encrypted router configs and captured TACACS and RADIUS keys, so credentials stored on network gear are the first exposure for defenders to close.
Reality
Accenture told employees it will centrally fund only $29 a month per person for Claude Enterprise from October 1, 404 Media reported. Some of those employees had been spending as much as $1,000 a month.
Perspective Coverage
6 publishersReality
A cyberattack on BAE Systems has halted bankruptcy notices from federal courts, the Administrative Office of the US Courts said on Thursday. BAE says the incident is isolated to one system, and the office did not respond when asked if data was stolen.
Perspective Coverage
7 publishersReality
Anthropic published two Claude Mythos cryptanalysis results on July 28, 2026, including a key-recovery attack that roughly halves HAWK's security. According to a July 29, 2026 blog post, HAWK is a proposed post-quantum signature scheme, and the companion AES result trims an old attack on a weakened cipher and leaves deployed AES as it was.
Reality
Cisco Talos tracks UAT-11985, an APT sending Taiwan research affiliates fake event invites that lead to a Google login proxy capturing MFA codes. The proxy relays entries to Google in real time, so a code typed into the fake page reaches the attacker first.
Reality
Five Eyes cyber agencies issued a call-to-action in June 2026 saying AI was accelerating the speed, scale and sophistication of cyber threats. In a June 25, 2026 newsletter, Risky Business's Tom Uren read it as the agencies' view that limiting AI's offensive capabilities to benign actors was no longer possible.
Reality
X suspended more than 13,000 accounts it ties to Iranian, Russian and Chinese influence operations before the Nov. 3 midterms. SC Media reported that X did not provide specific evidence for the attributions.
Reality