News
Key cybersecurity developments (Oct 19–23, 2026)
• PHP2Shell: mass exploitation looms for leaked critical PHP flaws • Chinese AI model writes more hackable code for US contractors • MITRE ATT&CK v20 catalogs AI abuse, MFA bypass, water utility attacks • Meta ordered to pay New Mexico $25 B for deceiving users about privacy • US cybersecurity job postings fall 26 % as AI security engineer demand soars • Mona Harrington named Assistant Director for Cyber Integration at DHS • Ivanti appoints Robert Ruelas as CRO and Sterling Parker as CCO • Jon Steinbach appointed strategic technical advisor to the Pentagon’s CIO • China defends DeepSeek after US ban of its AI from government systems • US agencies detail incident response practices for rogue AI agents • AI platform Cairn abused to hack over 100 organizations • Anthropic acquires confidential AI startup Opaque Systems • Quest Diagnostics reports cyber breach affecting certain patient records • 11 million impacted by Capcom data breach • 970,000 Medi‑Cal members affected by Paradigm Healthcare breach • Oracle patches over 1,200 vulnerabilities with October 2026 CPU • Cisco patches 34 vulnerabilities across multiple products • Hackers steal 1.8 million records from Nikkei