Your Daily Cybersecurity Briefing

AI Exploited in 84% of Ransomware Attacks, Microsoft Patches Record 1,413 Vulnerabilities

• A new global cybersecurity report from Semperis reveals that cybercriminals exploited artificial intelligence in 84% of ransomware attacks experienced by surveyed victims. Notably, 44% of these victims reported that attackers exploited their *own* AI systems, highlighting a counterintuitive vulnerability where defensive tools are turned into offensive weapons. The report also underscored the human toll, with over a third of victims facing psychological or physical threats against employees.

  CbsnewsCrowdstrikeCyberscoop

• Microsoft's October 2026 Patch Tuesday saw a record-breaking disclosure of 1,413 vulnerabilities across its products and services, surpassing any previous annual total. Among these, one actively exploited zero-day vulnerability (CVE-2026-96951) in Windows Shell was addressed, allowing attackers to bypass security features. The Cybersecurity and Infrastructure Security Agency (CISA) has added this flaw to its Known Exploited Vulnerabilities (KEV) Catalog, urging federal agencies to patch by Friday.

  CrowdstrikeCyberscoopCisa Gov

• CISA has also issued an urgent advisory for an actively exploited zero-day vulnerability (CVE-2026-104935) in Ivanti Connect Secure appliances, an authentication bypass flaw that enables remote, unauthenticated command execution. Discovered by Volexity, this vulnerability has been leveraged by threat actors for credential theft, data exfiltration, and log tampering, with CISA requiring federal civilian agencies to apply fixes by October 16, 2026.

  Cisa GovThehackernewsCisa Gov