Today's brief_
The five threats defenders should see today
- 01
LEAKMediumBREACHETS breach exposed California student information over monthsThe Record reported that exposed records included student names, birth dates, addresses, schools, districts and grade levels. - 02
ATK-AIMediumAIMITRE ATT&CK version 20 adds AI abuse and MFA bypass coverageMITRE released ATT&CK version 20, adding coverage for AI-agent data access, MFA bypass, CAPTCHA evasion and attacks on Minnesota water utilities. - 03
AGENTHighCAIRNCairn AI agents tried more than 1,200 websitesReuters said autonomous Cairn agents tried more than 1,200 sites and reached websites belonging to more than 100 companies. NorForge disclosed the findings on Oct 19, 2026. - 04
CVEHighCVESiemens confirms active exploitation of Software Center flawSiemens confirmed active exploitation of CVE-2026-110936 in Software Center on Oct 19 and fixed it in version 4.0.9.8. - 05
CVECriticalCVEFortiSIEM flaw CVE-2026-106173 could enable arbitrary file writesResearchers published proof-of-concept code for Fortinet FortiSIEM CVE-2026-106173. The Hacker News gave the flaw a 9.4 CVSS score, while BleepingComputer reported attacks.