Daily Briefing for 10.19.26

Attacks, Threats, and Vulnerabilities

FBI and CISA Warn of AI-Written Phishing Before the 2026 Midterms (Technology.org) AI-Written Phishing Targets the Midterms

Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft (Hackread) More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new findings from CPR.

Legislation, Policy, and Regulation

Stopgap funding bill temporarily extends key cyber info-sharing law (Nextgov.com) The short-term package pushes the sunset date for the bedrock cyber legislation to Dec. 11, in addition to setting extensions for the Technology Modernization Fund and National Cybersecurity Protection System.

This Cybersecurity Agency Is Supposed to Protect U.S. Elections. Officials Fear It’s Been Compromised by Trump. (ProPublica) DHS appointees made an unusual request of its agency that protects election systems: Secretly acquire a voting machine and hack it. Though not acted on, the request shows how the Trump administration has tried to use the agency for its own ends.

Litigation, Investigation, and Law Enforcement

Toronto Police Arrest Seven Men, Seize More Than 2,700 Rounds of Ammunition Following Violent Abduction Investigation (Toronto Police Service) The Toronto Police Service has arrested seven men and seized firearms, silencers, more than 2,700 rounds of ammunition, and large quantities of illicit drugs following an extensive investigation into the violent abduction of the owner of a cryptocurrency exchange.

For a complete running list of events, please visit the Event Tracker.

Events

AI Security Summit 2026: Runtime Trust (Virtual, Oct 21 - 22, 2026) AI agents no longer just request access. They take action. They plan, negotiate, and execute across your cloud and enterprise systems, often without a human in the loop. Traditional security answers one question: should this user have access? It has no answer for the one that matters now: should this agent be allowed to take this action, right now, in this context? That's the question AARM (Autonomous Action Runtime Management) was built to answer. Originally developed by Vanta and donated to the Cloud Security Alliance as an open, vendor-neutral specification, AARM defines how to intercept an agent's actions before they execute, evaluate them against context and policy, and stop the ones that shouldn't happen. Nearly 100 companies are already building on it, and CSA is now the permanent home stewarding where it goes next. Join CSA, Vanta, and Insecure Agents for the AI Security Summit 2026: Runtime Trust, a free, two-day virtual event on October 21–22, 2026, going deep on AARM alongside STAR for AI Level 2 and the fastest-moving, time-sensitive frontier of AI security shaping the year ahead.

Cyber Innovation Conference (Washington, DC, USA, Oct 26 - 27, 2026) The Cyber Innovation Conference brings together 600+ cybersecurity leaders, founders, investors, and operators shaping what comes next in cyber for two days of high-signal programming, executive roundtables, an Innovation Expo, and curated networking.

[un]prompted II (Virtual and San Francisco, California, USA, Oct 27 - 29, 2026) [un]prompted is back for the second time, this October, in SF. Whether you’re a CISO Excel jockey or a researcher sniffing for the scent of bits, we see you as part of our wider AI security practitioner community. [un]prompted is an intimate, raw, and fun gathering for the professionals actually doing the work, from offense to threat hunting to program building to national policy. No fluff. No filler. Just sharp talks, real demos, and conversations that matter.

CyberSat 2026 Unclassified Program (Reston, Virginia, USA, Nov 2 - 3, 2026) Space systems now form the backbone of critical infrastructure – from energy grids to autonomous transportation. CyberSat is the only forum where the operators, officials, and engineers actively defending those systems meet for four days a year.

CyberSat 2026 Classified Program (Chantilly, Virginia, USA, Nov 4 - 5, 2026) Space systems now form the backbone of critical infrastructure – from energy grids to autonomous transportation. CyberSat is the only forum where the operators, officials, and engineers actively defending those systems meet for four days a year.