Daily Briefing for 10.15.26

Attacks, Threats, and Vulnerabilities

CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials (Cyber Security News) CISA urged admins to patch Ivanti Connect Secure after zero-day attacks stole credentials and data.

Warning Over High-Risk Security Vulnerabilities in Widely Used LLM Gat (Infosecurity Magazine) CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic

CikaBika Bot RAT Uses Discord for C&C (SecurityWeek) Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.

Litigation, Investigation, and Law Enforcement

Police arrests 95 suspects in international CSAM crackdown action (BleepingComputer) Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups.

()

For a complete running list of events, please visit the Event Tracker.

Events

AI Security Summit 2026: Runtime Trust (Virtual, Oct 21 - 22, 2026) AI agents no longer just request access. They take action. They plan, negotiate, and execute across your cloud and enterprise systems, often without a human in the loop. Traditional security answers one question: should this user have access? It has no answer for the one that matters now: should this agent be allowed to take this action, right now, in this context? That's the question AARM (Autonomous Action Runtime Management) was built to answer. Originally developed by Vanta and donated to the Cloud Security Alliance as an open, vendor-neutral specification, AARM defines how to intercept an agent's actions before they execute, evaluate them against context and policy, and stop the ones that shouldn't happen. Nearly 100 companies are already building on it, and CSA is now the permanent home stewarding where it goes next. Join CSA, Vanta, and Insecure Agents for the AI Security Summit 2026: Runtime Trust, a free, two-day virtual event on October 21–22, 2026, going deep on AARM alongside STAR for AI Level 2 and the fastest-moving, time-sensitive frontier of AI security shaping the year ahead.

Cyber Innovation Conference (Washington, DC, USA, Oct 26 - 27, 2026) The Cyber Innovation Conference brings together 600+ cybersecurity leaders, founders, investors, and operators shaping what comes next in cyber for two days of high-signal programming, executive roundtables, an Innovation Expo, and curated networking.

[un]prompted II (Virtual and San Francisco, California, USA, Oct 27 - 29, 2026) [un]prompted is back for the second time, this October, in SF. Whether you’re a CISO Excel jockey or a researcher sniffing for the scent of bits, we see you as part of our wider AI security practitioner community. [un]prompted is an intimate, raw, and fun gathering for the professionals actually doing the work, from offense to threat hunting to program building to national policy. No fluff. No filler. Just sharp talks, real demos, and conversations that matter.

CyberSat 2026 Unclassified Program (Reston, Virginia, USA, Nov 2 - 3, 2026) Space systems now form the backbone of critical infrastructure – from energy grids to autonomous transportation. CyberSat is the only forum where the operators, officials, and engineers actively defending those systems meet for four days a year.

CyberSat 2026 Classified Program (Chantilly, Virginia, USA, Nov 4 - 5, 2026) Space systems now form the backbone of critical infrastructure – from energy grids to autonomous transportation. CyberSat is the only forum where the operators, officials, and engineers actively defending those systems meet for four days a year.